SCO
Page 2 of 2 — SCO CVEs from a corpus of 129, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0836 | | 1998-12-02 | UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. | |
CVE-1999-1185 | | 1998-10-06 | Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file. | |
CVE-1999-1041 | | 1998-08-27 | Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2)… | |
CVE-1999-0011 | Medium | 5.4 | 1998-04-08 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
CVE-1999-0010 | | 1998-04-08 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-0004 | | 1997-12-16 | MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-1209 | | 1997-11-20 | Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges. | |
CVE-1999-0024 | | 1997-08-13 | DNS cache poisoning via BIND, by predictable query IDs. | |
CVE-1999-0524 | Medium | 4.0 | 1997-08-01 | ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts. |
CVE-1999-0153 | | 1997-07-01 | Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke. | |
CVE-1999-0033 | | 1997-06-12 | Command execution in Sun systems via buffer overflow in the at program. | |
CVE-1999-0345 | | 1997-01-01 | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | |
CVE-1999-0128 | | 1996-12-18 | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | |
CVE-1999-0096 | | 1996-12-10 | Sendmail decode alias can be used to overwrite sensitive files. | |
CVE-1999-0129 | | 1996-12-03 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | |
CVE-1999-0131 | | 1996-09-11 | Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users. | |
CVE-1999-1252 | | 1996-09-04 | Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges. | |
CVE-1999-0023 | | 1996-07-24 | Local user gains root privileges via buffer overflow in rdist, via lookup() function. | |
CVE-1999-1253 | | 1996-06-07 | Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privilege… | |
CVE-1999-0019 | | 1996-04-24 | Delete or create a file via rpc.statd, due to invalid information. | |
CVE-1999-0078 | | 1996-04-18 | pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. | |
CVE-1999-1305 | | 1994-11-30 | Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1304 | | 1994-11-30 | Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1303 | | 1994-11-30 | Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1302 | | 1994-11-30 | Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access. | |
CVE-1999-1138 | | 1993-09-17 | SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which al… | |
CVE-1999-1162 | | 1993-05-24 | Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system. |