Vulnerabilities (CVE)

Filtered by vendor Sco Subscribe
Filtered by product Unixware
Total 66 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-1039 1 Sco 2 Openserver, Unixware 2025-04-03 5.0 MEDIUM N/A
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.
CVE-2005-0134 1 Sco 1 Unixware 2025-04-03 4.6 MEDIUM N/A
The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.
CVE-2001-1579 1 Sco 2 Open Unix, Unixware 2025-04-03 5.0 MEDIUM N/A
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
CVE-1999-0693 3 Hp, Ibm, Sco 3 Hp-ux, Aix, Unixware 2025-04-03 7.2 HIGH N/A
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
CVE-2000-0029 1 Sco 1 Unixware 2025-04-03 4.6 MEDIUM N/A
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
CVE-2003-0834 1 Sco 2 Open Unix, Unixware 2025-04-03 7.2 HIGH N/A
Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.
CVE-2000-0130 1 Sco 1 Unixware 2025-04-03 7.2 HIGH N/A
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
CVE-1999-0866 1 Sco 1 Unixware 2025-04-03 7.2 HIGH N/A
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
CVE-2000-0308 2 Netscape, Sco 4 Enterprise Server, Fasttrack Server, Proxy Server and 1 more 2025-04-03 10.0 HIGH N/A
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
CVE-2003-0937 1 Sco 2 Open Unix, Unixware 2025-04-03 4.6 MEDIUM N/A
SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.
CVE-2000-0351 1 Sco 1 Unixware 2025-04-03 4.6 MEDIUM N/A
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
CVE-2002-1323 5 Redhat, Safe.pm, Sco and 2 more 9 Enterprise Linux, Linux Advanced Workstation, Safe.pm and 6 more 2025-04-03 4.6 MEDIUM N/A
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
CVE-2003-0658 2 Caldera, Sco 4 Openlinux Server, Openlinux Workstation, Openserver and 1 more 2025-04-03 5.0 MEDIUM N/A
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.
CVE-2000-0173 1 Sco 1 Unixware 2025-04-03 5.0 MEDIUM N/A
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
CVE-2000-0307 1 Sco 3 Open Desktop, Openserver, Unixware 2025-04-03 5.0 MEDIUM N/A
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
CVE-2000-0099 1 Sco 1 Unixware 2025-04-03 7.2 HIGH N/A
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
CVE-1999-0836 1 Sco 1 Unixware 2025-04-03 10.0 HIGH N/A
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
CVE-1999-0864 1 Sco 1 Unixware 2025-04-03 7.2 HIGH N/A
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
CVE-2000-1014 1 Sco 1 Unixware 2025-04-03 7.5 HIGH N/A
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
CVE-1999-0942 1 Sco 1 Unixware 2025-04-03 7.2 HIGH N/A
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.