SCO : Security Vulnerabilities, CVEs, (Overflow) CVSS score >= 2
Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.
Max CVSS
4.6
EPSS Score
0.04%
Published
2006-09-09
Updated
2018-10-17
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
Max CVSS
7.5
EPSS Score
3.05%
Published
2006-01-04
Updated
2008-09-05
Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063.
Max CVSS
4.6
EPSS Score
0.06%
Published
2005-12-14
Updated
2017-07-20
Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.
Max CVSS
7.2
EPSS Score
0.06%
Published
2005-10-25
Updated
2008-09-10
Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.
Max CVSS
4.6
EPSS Score
0.06%
Published
2005-10-25
Updated
2019-10-09
Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.
Max CVSS
4.6
EPSS Score
0.04%
Published
2005-05-02
Updated
2016-10-18
Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.
Max CVSS
4.6
EPSS Score
0.04%
Published
2005-04-07
Updated
2008-09-05
Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.
Max CVSS
7.5
EPSS Score
4.81%
Published
2004-12-21
Updated
2018-10-30
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
Max CVSS
7.2
EPSS Score
0.04%
Published
2003-12-01
Updated
2018-05-03
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).
Max CVSS
7.5
EPSS Score
0.35%
Published
2002-12-31
Updated
2008-09-05
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument.
Max CVSS
4.6
EPSS Score
0.04%
Published
2001-12-31
Updated
2017-12-19
CVE-2001-0797
Public exploit
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
Max CVSS
10.0
EPSS Score
97.24%
Published
2001-12-12
Updated
2018-10-30
sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
Max CVSS
4.6
EPSS Score
0.05%
Published
2001-08-22
Updated
2008-09-10
deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
Max CVSS
7.2
EPSS Score
0.04%
Published
2001-08-22
Updated
2017-12-19
lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.
Max CVSS
7.5
EPSS Score
0.04%
Published
2001-08-22
Updated
2017-12-19
Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.
Max CVSS
4.6
EPSS Score
0.04%
Published
2001-08-22
Updated
2017-12-19
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2001-08-22
Updated
2017-12-19
lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.
Max CVSS
4.6
EPSS Score
0.05%
Published
2001-08-22
Updated
2017-12-19
Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut.
Max CVSS
4.6
EPSS Score
0.04%
Published
2001-08-22
Updated
2017-12-19
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
Max CVSS
10.0
EPSS Score
2.45%
Published
2001-03-12
Updated
2008-09-05
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
Max CVSS
7.5
EPSS Score
0.88%
Published
2000-02-16
Updated
2008-09-10
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
Max CVSS
7.2
EPSS Score
0.14%
Published
2000-01-27
Updated
2016-10-18
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
Max CVSS
7.2
EPSS Score
0.04%
Published
2000-01-18
Updated
2016-10-18
Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
Max CVSS
10.0
EPSS Score
4.14%
Published
1999-12-21
Updated
2016-10-18
Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
Max CVSS
10.0
EPSS Score
0.08%
Published
1999-12-30
Updated
2016-10-18