CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Caldera : Security Vulnerabilities

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complex ity Authen tication Confiden tiality Integrity Availa bility
1 CVE-2003-0658 2003-10-20 2008-09-10
5.0
 None Remote Low Not required Partial None None
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.
2 CVE-2002-1231 DoS 2002-11-04 2008-09-10
2.1
 None Local Low Not required None None Partial
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc.
3 CVE-2002-1199 Dir. Trav. 2002-10-28 2008-09-10
5.0
 None Remote Low Not required Partial None None
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
4 CVE-2002-0988 Overflow 2002-09-24 2008-09-10
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.
5 CVE-2002-0987 +Priv 2002-09-24 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.
6 CVE-2002-0981 Exec Code Overflow 2002-09-24 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.
7 CVE-2002-0911 +Priv 2002-10-04 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
8 CVE-2002-0887 2002-10-04 2008-09-05
2.1
 None Local Low Not required None Partial None
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
9 CVE-2002-0885 Exec Code Overflow 2002-10-04 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.
10 CVE-2002-0884 Exec Code 2002-10-04 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.
11 CVE-2002-0835 DoS 2002-10-04 2008-09-05
5.0
 None Remote Low Not required None None Partial
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.
12 CVE-2002-0827 +Priv 2002-08-12 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.
13 CVE-2002-0679 Exec Code Overflow 2002-09-05 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
14 CVE-2002-0678 2002-07-23 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
15 CVE-2002-0677 +Priv 2002-07-23 2008-09-10
7.5
 User Remote Low Not required Partial Partial Partial
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
16 CVE-2002-0517 Overflow +Priv 2002-08-12 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as (1) dtterm or (2) xterm.
17 CVE-2002-0512 +Priv 2002-08-12 2008-09-05
4.6
 User Local Low Not required Partial Partial Partial
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries.
18 CVE-2002-0442 Overflow +Priv 2002-07-26 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.
19 CVE-2002-0311 +Priv 2002-05-31 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi.
20 CVE-2002-0246 +Priv 2002-05-29 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.
21 CVE-2002-0164 DoS +Priv 2002-03-15 2010-05-25
4.6
 User Local Low Not required Partial Partial Partial
Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges.
22 CVE-2002-0105 +Priv 2002-03-25 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
23 CVE-2002-0004 Exec Code Mem. Corr. 2002-02-27 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.
24 CVE-2001-1577 +Priv 2001-12-31 2008-09-05
7.5
 User Remote Low Not required Partial Partial Partial
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.
25 CVE-2001-1576 Exec Code Overflow 2001-12-31 2008-09-05
4.6
 User Local Low Not required Partial Partial Partial
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.
26 CVE-2001-1478 Exec Code Overflow 2001-12-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.
27 CVE-2001-1359 2001-06-08 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
28 CVE-2001-1164 Exec Code Overflow 2001-06-27 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.
29 CVE-2001-1153 DoS Exec Code 2001-08-28 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.
30 CVE-2001-1063 Overflow +Priv 2001-08-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument.
31 CVE-2001-1062 Exec Code Overflow 2001-08-31 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.
32 CVE-2001-1030 Bypass 2001-07-18 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.
33 CVE-2001-0980 Exec Code 2001-07-17 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.
34 CVE-2001-0869 Exec Code 2001-12-21 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.
35 CVE-2001-0858 Overflow +Priv 2001-12-06 2008-09-05
4.6
 None Local Low Not required Partial Partial Partial
Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges.
36 CVE-2001-0851 Bypass 2001-12-06 2008-09-10
5.0
 None Remote Low Not required Partial None None
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.
37 CVE-2001-0850 Overflow 2001-12-06 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit those functions with a buffer overflow.
38 CVE-2001-0181 Exec Code 2001-03-26 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
39 CVE-2001-0178 +Priv 2001-03-26 2008-09-10
2.1
 None Local Low Not required Partial None None
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.
40 CVE-2001-0139 2001-03-12 2008-09-10
1.2
 None Local High Not required None Partial None
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.
41 CVE-2000-1195 Bypass 2001-08-31 2008-09-05
7.5
 None Remote Low Not required Partial Partial Partial
telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line option.
42 CVE-2000-1134 2001-01-09 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
43 CVE-2000-0917 Exec Code 2000-12-19 2008-09-05
10.0
 Admin Remote Low Not required Complete Complete Complete
Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands.
44 CVE-2000-0892 +Info 2001-07-21 2008-09-05
2.6
 None Remote High Not required Partial None None
Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the information via a telnet: URL.
45 CVE-2000-0844 264 Exec Code 2000-11-14 2009-01-20
10.0
 Admin Remote Low Not required Complete Complete Complete
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
46 CVE-2000-0594 DoS 2000-07-04 2008-09-10
5.0
 None Remote Low Not required None None Partial
BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes special formatting characters.
47 CVE-2000-0566 2000-07-03 2008-09-10
7.2
 Admin Local Low Not required Complete Complete Complete
makewhatis in Linux man package allows local users to overwrite files via a symlink attack.
48 CVE-2000-0531 DoS 1999-11-23 2008-09-05
2.1
 None Local Low Not required None None Partial
Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets.
49 CVE-2000-0530 2000-05-31 2008-09-05
7.2
 Admin Local Low Not required Complete Complete Complete
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.
50 CVE-2000-0491 DoS Exec Code Overflow 2000-05-24 2008-09-10
10.0
 Admin Remote Low Not required Complete Complete Complete
Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long FORWARD_QUERY request.
Total number of vulnerabilities : 78   Page : 1 (This Page)2
CVE is a registred trademark of the MITRE Corporation and the authoritive source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritive source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritive source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.