Sco Open Desktop — known CVE vulnerabilities

Every CVE whose affected-product data names Sco Open Desktop, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (19)

• CVE-1999-0009 — CVSS 10.0 (critical): Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
• CVE-1999-1138 — CVSS 10.0 (critical): SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for…
• CVE-1999-0017 — CVSS 7.5 (high): FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
• CVE-1999-1304 — CVSS 7.2 (high): Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
• CVE-1999-1305 — CVSS 7.2 (high): Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
• CVE-1999-0033 — CVSS 7.2 (high): Command execution in Sun systems via buffer overflow in the at program.
• CVE-1999-0023 — CVSS 7.2 (high): Local user gains root privileges via buffer overflow in rdist, via lookup() function.
• CVE-1999-1185 — CVSS 7.2 (high): Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
• CVE-1999-1302 — CVSS 7.2 (high): Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.
• CVE-1999-1303 — CVSS 7.2 (high): Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
• CVE-1999-1209 — CVSS 7.2 (high): Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
• CVE-1999-1162 — CVSS 6.4 (medium): Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to…
• CVE-1999-0011 — CVSS 5.4 (medium): Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
• CVE-2000-0307 — CVSS 5.0 (medium): Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which…
• CVE-1999-0010 — CVSS 5.0 (medium): Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
• CVE-1999-0019 — CVSS 5.0 (medium): Delete or create a file via rpc.statd, due to invalid information.
• CVE-1999-0024 — CVSS 5.0 (medium): DNS cache poisoning via BIND, by predictable query IDs.
• CVE-1999-0128 — CVSS 5.0 (medium): Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
• CVE-1999-0345 — CVSS 5.0 (medium): Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.