Caldera
82 CVEs across 16 Caldera products. Browse Caldera vulnerabilities, severities, and proof-of-concept exploits.
Caldera products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2014-2936 | | 2014-05-08 | The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter… | |
CVE-2014-2935 | | 2014-05-08 | costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall e… | |
CVE-2014-2934 | | 2014-05-08 | Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php… | |
CVE-2014-2933 | | 2014-05-08 | Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname. | |
CVE-2003-0658 | | 2003-10-20 | Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to re… | |
CVE-2002-1231 | | 2002-11-04 | SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc. | |
CVE-2002-1199 | | 2002-10-28 | The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal an… | |
CVE-2002-0911 | | 2002-10-04 | Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges. | |
CVE-2002-0887 | | 2002-10-04 | scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated us… | |
CVE-2002-0885 | | 2002-10-04 | Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote atta… | |
CVE-2002-0884 | | 2002-10-04 | Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote… | |
CVE-2002-0835 | | 2002-10-04 | Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phon… | |
CVE-2002-0988 | | 2002-09-24 | Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities. | |
CVE-2002-0987 | | 2002-09-24 | X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local user… | |
CVE-2002-0981 | | 2002-09-24 | Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line. | |
CVE-2002-0679 | | 2002-09-05 | Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an arg… | |
CVE-2002-0827 | | 2002-08-12 | Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability th… | |
CVE-2002-0517 | | 2002-08-12 | Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privi… | |
CVE-2002-0512 | | 2002-08-12 | startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could all… | |
CVE-2002-0442 | | 2002-07-26 | Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges. | |
CVE-2002-0678 | | 2002-07-23 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRAN… | |
CVE-2002-0677 | | 2002-07-23 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file… | |
CVE-2002-0311 | | 2002-05-31 | Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in th… | |
CVE-2002-0246 | | 2002-05-29 | Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE enviro… | |
CVE-1999-1570 | | 2002-05-01 | Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter. | |
CVE-2002-0105 | | 2002-03-25 | CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors sinc… | |
CVE-2002-0164 | | 2002-03-15 | Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possi… | |
CVE-2002-0004 | | 2002-02-27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same… | |
CVE-2001-1577 | | 2001-12-31 | Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused. | |
CVE-2001-1576 | | 2001-12-31 | Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument. | |
CVE-2001-1478 | | 2001-12-31 | Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code. | |
CVE-2001-0869 | | 2001-12-21 | Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to… | |
CVE-2001-0858 | | 2001-12-06 | Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges. | |
CVE-2001-0851 | | 2001-12-06 | Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie. | |
CVE-2001-0850 | | 2001-12-06 | A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote… | |
CVE-2001-1063 | | 2001-08-31 | Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument. | |
CVE-2001-1062 | | 2001-08-31 | Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code. | |
CVE-2000-1195 | | 2001-08-31 | telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with t… | |
CVE-2001-1153 | | 2001-08-28 | lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument. | |
CVE-2000-0892 | | 2001-07-21 | Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers… | |
CVE-2001-1030 | | 2001-07-18 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings a… | |
CVE-2001-0980 | | 2001-07-17 | docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web pag… | |
CVE-2001-1164 | | 2001-06-27 | Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconve… | |
CVE-2001-1359 | | 2001-06-08 | Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attack… | |
CVE-2001-0181 | | 2001-03-26 | Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands. | |
CVE-2001-0178 | | 2001-03-26 | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to ste… | |
CVE-2001-0139 | | 2001-03-12 | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations. | |
CVE-2000-1134 | | 2001-01-09 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-docu… | |
CVE-2000-0917 | | 2000-12-19 | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands. | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0372 | | 2000-07-12 | Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges. | |
CVE-2000-0594 | | 2000-07-04 | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel w… | |
CVE-2000-0566 | | 2000-07-03 | makewhatis in Linux man package allows local users to overwrite files via a symlink attack. | |
CVE-2000-0530 | | 2000-05-31 | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files. | |
CVE-2000-0491 | | 2000-05-24 | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via… | |
CVE-2000-0438 | | 2000-05-22 | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter. | |
CVE-2000-0192 | | 2000-03-05 | The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on… | |
CVE-2000-0218 | | 2000-02-03 | Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname. | |
CVE-2000-0531 | | 1999-11-23 | Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets. | |
CVE-2000-0369 | | 1999-10-08 | The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service. | |
CVE-1999-0880 | | 1999-10-01 | Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly. | |
CVE-1999-0879 | | 1999-10-01 | Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file. | |
CVE-1999-0872 | | 1999-08-25 | Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file. | |
CVE-1999-0769 | | 1999-08-25 | Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable. | |
CVE-2000-0374 | | 1999-08-22 | The default configuration of kdm in Caldera and Mandrake Linux, and possibly other distributions, allows XDMCP connections from any host, which allows remote a… | |
CVE-1999-0731 | | 1999-06-23 | The KDE klock program allows local users to unlock a session using malformed input. | |
CVE-1999-0712 | | 1999-04-27 | A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable. | |
CVE-1999-0439 | | 1999-04-05 | Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file. | |
CVE-1999-0434 | | 1999-03-30 | XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privilege… | |
CVE-1999-0368 | | 1999-02-09 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. | |
CVE-2000-0370 | | 1999-01-29 | The debug option in Caldera Linux smail allows remote attackers to execute commands via shell metacharacters in the -D option for the rmail command. | |
CVE-1999-1288 | | 1998-11-19 | Samba 1.9.18 inadvertently includes a prototype application, wsmbconf, which is installed with incorrect permissions including the setgid bit, which allows loc… | |
CVE-1999-0002 | | 1998-10-12 | Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-0104 | | 1997-12-16 | A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-1182 | | 1997-07-17 | Buffer overflow in run-time linkers (1) ld.so or (2) ld-linux.so for Linux systems allows local users to gain privileges by calling a setuid program with a lon… | |
CVE-1999-0042 | | 1997-04-07 | Buffer overflow in University of Washington's implementation of IMAP and POP servers. | |
CVE-1999-0047 | | 1997-01-28 | MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4. | |
CVE-1999-0043 | Critical | 9.8 | 1996-12-04 | Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others. |
CVE-1999-0130 | | 1996-11-16 | Local users can start Sendmail in daemon mode and gain root privileges. | |
CVE-1999-0234 | | 1996-10-08 | Bash treats any character with a value of 255 as a command separator. |