CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

SCO : Security Vulnerabilities (CVSS score between 7 and 7.99)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2009-1552 DoS 2009-05-06 2009-05-07
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via unspecified vectors.
2 CVE-2008-6559 20 1 +Priv 2009-03-30 2009-03-31
7.2
 Admin Local Low Not required Complete Complete Complete
Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.
3 CVE-2008-6558 20 1 +Priv 2009-03-30 2009-07-24
7.2
 None Local Low Not required Complete Complete Complete
Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying the RELIANT_PATH environment variable to point to a malicious bin/hvenv program.
4 CVE-2006-0072 Exec Code Overflow 2006-01-03 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
5 CVE-2005-2934 +Priv 2005-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.
6 CVE-2005-2927 Exec Code Overflow 2005-10-25 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.
7 CVE-2005-0109 +Info 2005-03-05 2010-08-21
7.2
 None Local Low Not required Complete Complete Complete
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
8 CVE-2004-1307 Exec Code Overflow 2004-12-21 2010-08-21
7.5
 User Remote Low Not required Partial Partial Partial
Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.
9 CVE-2004-1131 Exec Code Overflow 2005-02-07 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.
10 CVE-2004-1082 2004-02-03 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.
11 CVE-2004-0510 Exec Code Overflow 2004-12-23 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.
12 CVE-2004-0390 2004-12-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
13 CVE-2003-1021 +Priv 2005-01-26 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.
14 CVE-2003-0834 Exec Code Overflow 2003-12-01 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
15 CVE-2003-0791 2003-10-07 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
16 CVE-2003-0742 2003-10-06 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
17 CVE-2003-0597 +Priv 2003-08-27 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.
18 CVE-2002-1998 Exec Code Overflow 2002-12-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).
19 CVE-2002-0716 +Priv 2002-07-26 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument.
20 CVE-2001-0587 Overflow +Priv 2001-08-22 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
21 CVE-2001-0579 Overflow +Priv 2001-08-22 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.
22 CVE-2001-0577 Overflow +Priv 2001-08-22 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
23 CVE-2000-1014 Exec Code 2000-12-11 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
24 CVE-2000-0215 +Priv 2000-02-08 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
25 CVE-2000-0158 Overflow +Priv 2000-02-16 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
26 CVE-2000-0130 Exec Code Overflow 2000-01-27 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
27 CVE-2000-0099 Overflow +Priv 2000-01-18 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
28 CVE-1999-1571 Overflow +Priv 1999-11-04 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.
29 CVE-1999-1450 +Priv 1999-01-27 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
30 CVE-1999-1305 1994-11-30 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
31 CVE-1999-1304 1994-11-30 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
32 CVE-1999-1303 1994-11-30 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
33 CVE-1999-1302 1994-11-30 2011-03-10
7.2
 Admin Local Low Not required Complete Complete Complete
Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.
34 CVE-1999-1253 +Priv 1996-06-07 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges.
35 CVE-1999-1252 +Priv 1996-09-04 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.
36 CVE-1999-1209 +Priv 1997-11-20 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
37 CVE-1999-1185 Overflow +Priv 1998-10-06 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
38 CVE-1999-1041 Overflow 1998-08-27 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
39 CVE-1999-0988 1999-12-04 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
40 CVE-1999-0979 +Priv 2000-04-11 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
41 CVE-1999-0942 +Priv 1999-10-04 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
42 CVE-1999-0866 Overflow +Priv 1999-12-03 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
43 CVE-1999-0864 1999-12-03 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
44 CVE-1999-0845 Overflow 1999-11-25 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in SCO su program allows local users to gain root access via a long username.
45 CVE-1999-0830 Overflow 1999-11-01 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in SCO UnixWare Xsco command via a long argument.
46 CVE-1999-0697 +Priv 1999-09-09 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
SCO Doctor allows local users to gain root privileges through a Tools option.
47 CVE-1999-0693 Overflow +Priv 2000-03-02 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
48 CVE-1999-0476 1999-03-01 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
49 CVE-1999-0411 1999-03-07 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.
50 CVE-1999-0131 DoS Overflow 1996-09-11 2008-09-09
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
Total number of vulnerabilities : 53   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.