SCO
129 CVEs across 16 SCO products. Browse SCO vulnerabilities, severities, and proof-of-concept exploits.
SCO products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2011-1432 | | 2011-03-16 | The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into… | |
CVE-2009-1552 | | 2009-05-06 | Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via… | |
CVE-2008-6559 | | 2009-03-30 | Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences th… | |
CVE-2008-6558 | | 2009-03-30 | Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying… | |
CVE-2008-0310 | | 2008-04-07 | Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences i… | |
CVE-2008-1343 | | 2008-03-17 | Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileges via unknown vectors. | |
CVE-2006-4655 | | 2006-09-09 | Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 throu… | |
CVE-2006-0072 | | 2006-01-04 | Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probabl… | |
CVE-2005-3626 | | 2005-12-31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash)… | |
CVE-2005-3625 | | 2005-12-31 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinit… | |
CVE-2005-3624 | | 2005-12-31 | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to co… | |
CVE-2005-2934 | | 2005-12-31 | Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors. | |
CVE-2005-3903 | | 2005-12-14 | Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file… | |
CVE-2005-2927 | | 2005-10-25 | Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argu… | |
CVE-2005-2926 | | 2005-10-25 | Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment var… | |
CVE-2005-2132 | | 2005-08-03 | RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of respon… | |
CVE-2005-0134 | | 2005-05-18 | The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets. | |
CVE-2005-0993 | | 2005-05-02 | Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument. | |
CVE-2005-0351 | | 2005-04-07 | Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOM… | |
CVE-2005-0109 | Medium | 5.6 | 2005-03-05 | Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a mali… |
CVE-2004-1131 | | 2005-02-07 | Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments. | |
CVE-2003-1021 | | 2005-01-26 | The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline. | |
CVE-2004-1039 | | 2005-01-11 | The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a den… | |
CVE-2004-0996 | | 2005-01-10 | main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2004-0390 | | 2004-12-31 | SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauth… | |
CVE-2004-0512 | | 2004-12-23 | Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service… | |
CVE-2004-0511 | | 2004-12-23 | Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service… | |
CVE-2004-0510 | | 2004-12-23 | Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demons… | |
CVE-2004-1307 | | 2004-12-21 | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with… | |
CVE-2004-0112 | | 2004-11-23 | The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets du… | |
CVE-2004-0081 | | 2004-11-23 | OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demo… | |
CVE-2004-0079 | High | 7.5 | 2004-11-23 | The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafte… |
CVE-2004-1082 | | 2004-02-03 | mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to repl… | |
CVE-2004-1124 | | 2004-01-14 | Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities. | |
CVE-2003-0937 | | 2003-12-15 | SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a p… | |
CVE-2003-0914 | | 2003-12-15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses wi… | |
CVE-2003-0834 | | 2003-12-01 | Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help… | |
CVE-2003-0872 | | 2003-11-17 | Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary fil… | |
CVE-2003-0658 | | 2003-10-20 | Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to re… | |
CVE-2003-0791 | Critical | 9.8 | 2003-10-07 | The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to t… |
CVE-2003-0742 | | 2003-10-06 | SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it… | |
CVE-2003-0597 | | 2003-08-27 | Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges. | |
CVE-2003-0282 | | 2003-06-16 | Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are… | |
CVE-2002-1998 | | 2002-12-31 | Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_crea… | |
CVE-2002-1323 | | 2002-12-11 | Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using… | |
CVE-2002-1199 | | 2002-10-28 | The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal an… | |
CVE-2002-0716 | | 2002-07-26 | Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name a… | |
CVE-2001-1579 | | 2001-12-31 | The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a… | |
CVE-2001-1578 | | 2001-12-31 | Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descripto… | |
CVE-2001-1508 | | 2001-12-31 | Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument. | |
CVE-2001-0797 | | 2001-12-12 | Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments thro… | |
CVE-2001-0896 | | 2001-11-30 | Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO. | |
CVE-2001-0627 | | 2001-08-22 | vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack. | |
CVE-2001-0588 | | 2001-08-22 | sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overfl… | |
CVE-2001-0587 | | 2001-08-22 | deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to… | |
CVE-2001-0579 | | 2001-08-22 | lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command. | |
CVE-2001-0578 | | 2001-08-22 | Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms comman… | |
CVE-2001-0577 | | 2001-08-22 | recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argum… | |
CVE-2001-0576 | | 2001-08-22 | lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' comma… | |
CVE-2001-0575 | | 2001-08-22 | Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut. | |
CVE-2001-1148 | | 2001-06-13 | Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM e… | |
CVE-2000-0351 | | 2001-03-12 | Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages. | |
CVE-2000-0349 | | 2001-03-12 | Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service. | |
CVE-2000-0348 | | 2001-03-12 | A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges. | |
CVE-2000-0308 | | 2001-03-12 | Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to g… | |
CVE-2000-0307 | | 2001-03-12 | Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserve… | |
CVE-2000-0306 | | 2001-03-12 | Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message. | |
CVE-2000-1014 | | 2000-12-11 | Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via for… | |
CVE-2000-0842 | | 2000-11-14 | The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-1999-0979 | | 2000-04-11 | The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the pri… | |
CVE-2000-0173 | | 2000-03-10 | Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. | |
CVE-1999-0693 | | 2000-03-02 | Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. | |
CVE-2000-0158 | | 2000-02-16 | Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon. | |
CVE-2000-0154 | | 2000-02-16 | The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack. | |
CVE-2000-0224 | | 2000-02-15 | ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack. | |
CVE-2000-0215 | | 2000-02-08 | Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges. | |
CVE-2000-0147 | | 2000-02-08 | snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration. | |
CVE-2000-0130 | | 2000-01-27 | Buffer overflow in SCO scohelp program allows remote attackers to execute commands. | |
CVE-2000-0099 | | 2000-01-18 | Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument. | |
CVE-2000-0003 | | 1999-12-30 | Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable. | |
CVE-2000-0029 | | 1999-12-27 | UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. | |
CVE-2000-0026 | | 1999-12-21 | Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string. | |
CVE-1999-0988 | | 1999-12-04 | UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. | |
CVE-1999-0866 | | 1999-12-03 | Buffer overflow in UnixWare xauto program allows local users to gain root privilege. | |
CVE-1999-0864 | | 1999-12-03 | UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file. | |
CVE-1999-0825 | | 1999-12-03 | The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail. | |
CVE-1999-0828 | | 1999-12-02 | UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission. | |
CVE-1999-0845 | | 1999-11-25 | Buffer overflow in SCO su program allows local users to gain root access via a long username. | |
CVE-1999-0851 | | 1999-11-10 | Denial of service in BIND named via naptr. | |
CVE-1999-0835 | | 1999-11-10 | Denial of service in BIND named via malformed SIG records. | |
CVE-1999-1571 | | 1999-11-04 | Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability… | |
CVE-1999-0830 | | 1999-11-01 | Buffer overflow in SCO UnixWare Xsco command via a long argument. | |
CVE-1999-0893 | | 1999-10-11 | userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack. | |
CVE-1999-0942 | | 1999-10-04 | UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes. | |
CVE-1999-0697 | | 1999-09-09 | SCO Doctor allows local users to gain root privileges through a Tools option. | |
CVE-1999-0411 | | 1999-03-07 | Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, all… | |
CVE-1999-0476 | | 1999-03-01 | A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user. | |
CVE-1999-0368 | | 1999-02-09 | Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto. | |
CVE-1999-1450 | | 1999-01-27 | Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to… | |
CVE-1999-0798 | | 1998-12-04 | Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. |