Sco Openserver — known CVE vulnerabilities

Every CVE whose affected-product data names Sco Openserver, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (71)

• CVE-1999-1138 — CVSS 10.0 (critical): SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for…
• CVE-1999-0835 — CVSS 10.0 (critical): Denial of service in BIND named via malformed SIG records.
• CVE-2001-0797 — CVSS 10.0 (critical): Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large…
• CVE-2005-3625 — CVSS 10.0 (critical): Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial…
• CVE-1999-0798 — CVSS 10.0 (critical): Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
• CVE-2000-0306 — CVSS 10.0 (critical): Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
• CVE-1999-0368 — CVSS 10.0 (critical): Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
• CVE-2003-0791 — CVSS 9.8 (critical): The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the…
• CVE-2006-0072 — CVSS 7.5 (high): Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument…
• CVE-1999-0017 — CVSS 7.5 (high): FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
• CVE-2000-0158 — CVSS 7.5 (high): Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
• CVE-1999-1450 — CVSS 7.5 (high): Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows…
• CVE-2004-0390 — CVSS 7.5 (high): SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote…
• CVE-2004-0079 — CVSS 7.5 (high): The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service…
• CVE-2001-0579 — CVSS 7.5 (high): lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument…
• CVE-2004-1082 — CVSS 7.5 (high): mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows…
• CVE-2004-1131 — CVSS 7.2 (high): Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long…
• CVE-1999-0023 — CVSS 7.2 (high): Local user gains root privileges via buffer overflow in rdist, via lookup() function.
• CVE-1999-0033 — CVSS 7.2 (high): Command execution in Sun systems via buffer overflow in the at program.
• CVE-1999-0131 — CVSS 7.2 (high): Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
• CVE-1999-0411 — CVSS 7.2 (high): Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a…
• CVE-1999-0476 — CVSS 7.2 (high): A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
• CVE-1999-0697 — CVSS 7.2 (high): SCO Doctor allows local users to gain root privileges through a Tools option.
• CVE-1999-1041 — CVSS 7.2 (high): Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM…
• CVE-1999-1185 — CVSS 7.2 (high): Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
• CVE-1999-1209 — CVSS 7.2 (high): Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
• CVE-1999-1253 — CVSS 7.2 (high): Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to…
• CVE-1999-1571 — CVSS 7.2 (high): Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a…
• CVE-2001-0577 — CVSS 7.2 (high): recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the…
• CVE-2001-0587 — CVSS 7.2 (high): deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in…
• CVE-2002-0716 — CVSS 7.2 (high): Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string…
• CVE-2003-0597 — CVSS 7.2 (high): Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.
• CVE-2003-0742 — CVSS 7.2 (high): SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause…
• CVE-2004-0510 — CVSS 7.2 (high): Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute…
• CVE-2005-0109 — CVSS 5.6 (medium): Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local…
• CVE-1999-0011 — CVSS 5.4 (medium): Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
• CVE-2004-0081 — CVSS 5.0 (medium): OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service…
• CVE-2004-0112 — CVSS 5.0 (medium): The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of…
• CVE-1999-0010 — CVSS 5.0 (medium): Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
• CVE-1999-0024 — CVSS 5.0 (medium): DNS cache poisoning via BIND, by predictable query IDs.
• CVE-2004-1039 — CVSS 5.0 (medium): The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote…
• CVE-2001-0896 — CVSS 5.0 (medium): Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.
• CVE-2000-0307 — CVSS 5.0 (medium): Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which…
• CVE-1999-0153 — CVSS 5.0 (medium): Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
• CVE-1999-0345 — CVSS 5.0 (medium): Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
• CVE-2005-3624 — CVSS 5.0 (medium): The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others…
• CVE-2002-1199 — CVSS 5.0 (medium): The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a…
• CVE-1999-0019 — CVSS 5.0 (medium): Delete or create a file via rpc.statd, due to invalid information.
• CVE-2005-3626 — CVSS 5.0 (medium): Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial…
• CVE-1999-0128 — CVSS 5.0 (medium): Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
• CVE-1999-0096 — CVSS 5.0 (medium): Sendmail decode alias can be used to overwrite sensitive files.
• CVE-2001-0575 — CVSS 4.6 (medium): Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to…
• CVE-2005-0993 — CVSS 4.6 (medium): Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.
• CVE-2001-0578 — CVSS 4.6 (medium): Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument…
• CVE-2005-2926 — CVSS 4.6 (medium): Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long…
• CVE-2001-0588 — CVSS 4.6 (medium): sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges…
• CVE-1999-0129 — CVSS 4.6 (medium): Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
• CVE-2001-1148 — CVSS 4.6 (medium): Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain…
• CVE-2001-1508 — CVSS 4.6 (medium): Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command…
• CVE-2004-1124 — CVSS 4.6 (medium): Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized…
• CVE-2005-0351 — CVSS 4.6 (medium): Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary…
• CVE-2001-0576 — CVSS 4.6 (medium): lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow…
• CVE-2001-0627 — CVSS 3.7 (low): vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack.
• CVE-2003-0872 — CVSS 2.1 (low): Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink…
• CVE-1999-0893 — CVSS 2.1 (low): userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.
• CVE-2000-0147 — CVSS 2.1 (low): snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's…
• CVE-1999-0851 — CVSS 2.1 (low): Denial of service in BIND named via naptr.
• CVE-2004-0512 — CVSS 2.1 (low): Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause…
• CVE-2004-0511 — CVSS 2.1 (low): Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause…
• CVE-2001-1578 — CVSS 2.1 (low): Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers…
• CVE-1999-0078 — CVSS 1.9 (low): pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.