Total
66 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2004-1039 | 1 Sco | 2 Openserver, Unixware | 2025-04-03 | 5.0 MEDIUM | N/A |
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request. | |||||
CVE-2005-0134 | 1 Sco | 1 Unixware | 2025-04-03 | 4.6 MEDIUM | N/A |
The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets. | |||||
CVE-2001-1579 | 1 Sco | 2 Open Unix, Unixware | 2025-04-03 | 5.0 MEDIUM | N/A |
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service. | |||||
CVE-1999-0693 | 3 Hp, Ibm, Sco | 3 Hp-ux, Aix, Unixware | 2025-04-03 | 7.2 HIGH | N/A |
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges. | |||||
CVE-2000-0029 | 1 Sco | 1 Unixware | 2025-04-03 | 4.6 MEDIUM | N/A |
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack. | |||||
CVE-2003-0834 | 1 Sco | 2 Open Unix, Unixware | 2025-04-03 | 7.2 HIGH | N/A |
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME. | |||||
CVE-2000-0130 | 1 Sco | 1 Unixware | 2025-04-03 | 7.2 HIGH | N/A |
Buffer overflow in SCO scohelp program allows remote attackers to execute commands. | |||||
CVE-1999-0866 | 1 Sco | 1 Unixware | 2025-04-03 | 7.2 HIGH | N/A |
Buffer overflow in UnixWare xauto program allows local users to gain root privilege. | |||||
CVE-2000-0308 | 2 Netscape, Sco | 4 Enterprise Server, Fasttrack Server, Proxy Server and 1 more | 2025-04-03 | 10.0 HIGH | N/A |
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges. | |||||
CVE-2003-0937 | 1 Sco | 2 Open Unix, Unixware | 2025-04-03 | 4.6 MEDIUM | N/A |
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user. | |||||
CVE-2000-0351 | 1 Sco | 1 Unixware | 2025-04-03 | 4.6 MEDIUM | N/A |
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages. | |||||
CVE-2002-1323 | 5 Redhat, Safe.pm, Sco and 2 more | 9 Enterprise Linux, Linux Advanced Workstation, Safe.pm and 6 more | 2025-04-03 | 4.6 MEDIUM | N/A |
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls. | |||||
CVE-2003-0658 | 2 Caldera, Sco | 4 Openlinux Server, Openlinux Workstation, Openserver and 1 more | 2025-04-03 | 5.0 MEDIUM | N/A |
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules. | |||||
CVE-2000-0173 | 1 Sco | 1 Unixware | 2025-04-03 | 5.0 MEDIUM | N/A |
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service. | |||||
CVE-2000-0307 | 1 Sco | 3 Open Desktop, Openserver, Unixware | 2025-04-03 | 5.0 MEDIUM | N/A |
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024. | |||||
CVE-2000-0099 | 1 Sco | 1 Unixware | 2025-04-03 | 7.2 HIGH | N/A |
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument. | |||||
CVE-1999-0836 | 1 Sco | 1 Unixware | 2025-04-03 | 10.0 HIGH | N/A |
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. | |||||
CVE-1999-0864 | 1 Sco | 1 Unixware | 2025-04-03 | 7.2 HIGH | N/A |
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file. | |||||
CVE-2000-1014 | 1 Sco | 1 Unixware | 2025-04-03 | 7.5 HIGH | N/A |
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter. | |||||
CVE-1999-0942 | 1 Sco | 1 Unixware | 2025-04-03 | 7.2 HIGH | N/A |
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes. |