MidnightBSD

Advisories for sco

CVE-1999-0004 MEDIUM

MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
hp dtmail *
sco unixware 7.0
university_of_washington pine 4.02
CVE-1999-0009 HIGH

Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
data_general dg_ux 5.4_3.1
sgi irix 3.3.3
sco unixware 2.1
sgi irix 4.0.5a
ibm aix 4.1.2
sgi irix 5.3
sgi irix 5.2
netbsd netbsd 1.1
sun sunos 5.3
sgi irix 4.0.1
ibm aix 4.1.4
sgi irix 4.0.3
netbsd netbsd 1.2
data_general dg_ux 5.4_3.0
sgi irix 4.0.5
sgi irix 4.0.4t
sco open_desktop 3.0
sgi irix 4.0.5f
caldera openlinux 1.0
sun sunos 5.5
isc bind 8.1.1
sgi irix 6.0
sgi irix 4.0.5h
sgi irix 4.0.2
sgi irix 4.0.5_iop
sun solaris 2.5.1
sgi irix 4.0.5d
sgi irix 4.0.5g
isc bind 8.1
sgi irix 3.3.2
sgi irix 5.0.1
sgi irix 4.0.1t
sgi irix 4.0.5e
ibm aix 4.2.1
ibm aix 4.1.5
sco open_desktop 5.0
sgi irix 3.2
sgi irix 4.0.4
redhat linux 4.2
data_general dg_ux 5.4_4.1
sgi irix 5.0
sun sunos 5.5.1
data_general dg_ux 5.4_4.11
sgi irix 6.2
bsdi bsd_os 2.0
sun solaris 2.6
isc bind 4.9.6
sgi irix 4.0
nec asl_ux_4800 64
ibm aix 4.2
ibm aix 4.1
sgi irix 4.0.4b
netbsd netbsd 1.3.1
redhat linux 5.0
sgi irix 5.1
ibm aix 4.1.1
sgi irix 4.0.5_ipr
netbsd netbsd 1.3
bsdi bsd_os 2.1
redhat linux 4.1
sun solaris 2.5
sgi irix 6.1
netbsd netbsd 1.2.1
sgi irix 6.3
redhat linux 4.0
bsdi bsd_os 2.0.1
ibm aix 4.3
sgi irix 3.3
ibm aix 4.1.3
sun sunos -
sgi irix 5.1.1
netbsd netbsd 1.0
sco unixware 7.0
sun sunos 5.4
sgi irix 3.3.1
CVE-1999-0010 MEDIUM

Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 2.1
sun sunos 5.6
redhat linux 4.2
sco unix 3.2v4
sun sunos 5.5.1
data_general dg_ux y2k_patchr4.12mu03
sco openserver 5.0
sun sunos 5.3
ibm aix 4.2
ibm aix 4.1
netbsd netbsd 1.3.1
redhat linux 5.0
data_general dg_ux y2k_patchr4.20mu01
netbsd netbsd 1.3
sco open_desktop 3.0
data_general dg_ux y2k_patchr4.20mu03
sun sunos 5.5
data_general dg_ux y2k_patchr4.20mu02
isc bind 8
data_general dg_ux y2k_patchr4.11mu05
nec asl_ux_4800 13
ibm aix 4.3
isc bind 4.9
nec asl_ux_4800 11
sco unixware 7.0
sun sunos 5.4
CVE-1999-0011 HIGH

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,CWE-1067,

Products Affected

Vendor Product Version
sco unixware 2.1
sun sunos 5.6
redhat linux 4.2
sco unix 3.2v4
sun sunos 5.5.1
data_general dg_ux y2k_patchr4.12mu03
sco openserver 5.0
sun sunos 5.3
ibm aix 4.2
ibm aix 4.1
netbsd netbsd 1.3.1
redhat linux 5.0
data_general dg_ux y2k_patchr4.20mu01
netbsd netbsd 1.3
sco open_desktop 3.0
data_general dg_ux y2k_patchr4.20mu03
sun sunos 5.5
data_general dg_ux y2k_patchr4.20mu02
isc bind 8
data_general dg_ux y2k_patchr4.11mu05
nec asl_ux_4800 13
ibm aix 4.3
isc bind 4.9
nec asl_ux_4800 11
sco unixware 7.0
sun sunos 5.4
CVE-1999-0017 HIGH

FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
gnu inet 5.01
sco unixware 2.1
sun sunos 5.5.1
washington_university wu-ftpd 2.4
freebsd freebsd 1.1
gnu inet 6.01
netbsd netbsd 1.1
sun sunos 4.1.3u1
sun sunos 4.1.4
ibm aix 3.2
sun sunos 5.3
ibm aix 4.2
freebsd freebsd 2.0
ibm aix 4.1
netbsd netbsd 1.2
sco open_desktop 3.0
gnu inet 6.02
sun sunos 5.5
caldera openlinux 1.2
netbsd netbsd 1.2.1
freebsd freebsd 1.0
siemens reliant_unix *
sco openserver 5.0.4
ibm aix 4.3
freebsd freebsd 1.2
netbsd netbsd 1.0
sun sunos 5.4
freebsd freebsd 2.1.7
freebsd freebsd 2.1.0
CVE-1999-0019 MEDIUM

Delete or create a file via rpc.statd, due to invalid information.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sgi irix 6.1
sun sunos 5.5
sco openserver 3.0
data_general dg_ux 4.11
sco open_desktop 2
nighthawk powerux *
sco openserver 5.0
sco unixware 2
sun sunos 4.1.4
ibm aix 3.2
sun sunos 5.3
sun sunos 5.4
ibm aix 4.1
ncr mp-ras 3.0
nighthawk cx_ux *
sco open_desktop 3
sun sunos 4.1.3
ncr mp-ras 2.03
CVE-1999-0023 HIGH

Local user gains root privileges via buffer overflow in rdist, via lookup() function.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 2.0
sco unixware 2.1
sco unixware 2.0
sco tcp_ip 1.2.0
sun sunos 5.5.1
sco internet_faststart 1.0
sco openserver 5.0
sun sunos 4.1.3u1
sun sunos 4.1.4
ibm aix 3.2
sun sunos 5.3
ibm aix 4.2
freebsd freebsd 2.0
sco open_desktop 2.0
ibm aix 4.1
inet inet 6.01
sco openserver 5.0.2
bsdi bsd_os *
sco open_desktop 3.0
sun sunos 5.5
inet inet 5.01
freebsd freebsd 2.0.5
sun sunos -
freebsd freebsd 2.2
sco tcp_ip 1.2.1
sun sunos 5.4
sun sunos 4.1.3
freebsd freebsd 2.1.0
CVE-1999-0024 MEDIUM

DNS cache poisoning via BIND, by predictable query IDs.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sun solaris 2.5
sco unixware 2.1
nec up-ux_v 4.2mp
bsdi bsd_os 3.0
sun sunos 5.5
sco unix 3.2v4
sun sunos 5.5.1
sun solaris 2.5.1
sun solaris 2.6
nec asl_ux_4800 64
isc bind 8.1
nec ews-ux_v 4.2mp
sco openserver 5.0
sun sunos -
sun sunos 5.3
ibm aix 4.2
nec ews-ux_v 4.2
isc bind 4.9.5
sun sunos 5.4
ibm aix 4.1
sun solaris 2.4
bsdi bsd_os 2.1
CVE-1999-0033 HIGH

Command execution in Sun systems via buffer overflow in the at program.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco unixware 2.1
sun sunos 5.5
ibm aix *
sco openserver 3.0
sco unixware 3.2v4
sun sunos 5.5.1
sco openserver 5.0
sun sunos 5.3
sgi irix *
sun sunos 5.4
ncr mp-ras 3.0
CVE-1999-0078 LOW

pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
next nextstep *
sco unixware 2.1
sun sunos 5.5
freebsd freebsd 6.2
nec up-ux_v *
ncr mp-ras 3.01
sgi irix 5.3
hp hp-ux *
sco openserver 5
sun sunos 4.1
ibm aix 3.2
ibm aix 4.2
sun sunos 5.4
ibm aix 4.1
ncr mp-ras 3.0
ncr mp-ras 2.03
bsdi bsd_os *
CVE-1999-0096 MEDIUM

Sendmail decode alias can be used to overwrite sensitive files.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0
freebsd freebsd 2.1.6
sco internet_faststart 1.1
freebsd freebsd 2.1.6.1
sco openserver 5.0.2
sco internet_faststart 1.0
freebsd freebsd 2.1.5
bsdi bsd_os *
CVE-1999-0128 MEDIUM

Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
ibm sng 2.1
linux linux_kernel 1.3.0
sun sunos 5.5
digital osf_1 1.3.3
sun sunos 5.5.1
sco internet_faststart 1.0
linux linux_kernel 2.0
sco openserver 5.0
sco internet_faststart 1.1
ibm aix 3.2
ibm aix 4.2
sco tcp_ip 1.2.1
sun sunos 5.4
ibm sng 2.2
ibm aix 4.1
sco openserver 5.0.2
ibm sng *
CVE-1999-0129 MEDIUM

Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
freebsd freebsd 2.1.6.1
sun sunos 5.5.1
eric_allman sendmail 8.8.3
sco internet_faststart 1.0
hp hp-ux 10.16
eric_allman sendmail 8.8
hp hp-ux 10.10
sco openserver 5.0
sun sunos 4.1.3u1
sun sunos 4.1.4
ibm aix 3.2
sun sunos 5.3
ibm aix 4.2
ibm aix 4.1
sco openserver 5.0.2
sun solaris 2.4
freebsd freebsd 2.1.5
bsdi bsd_os 2.1
sun solaris 2.5
sun sunos 5.5
hp hp-ux 10.20
hp hp-ux 10.00
sun solaris 2.5.1
eric_allman sendmail 8.8.1
freebsd freebsd 2.1.6
sco internet_faststart 1.1
sun sunos 5.4
hp hp-ux 10.01
eric_allman sendmail 8.8.2
CVE-1999-0131 HIGH

Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
digital osf_1 1.3.2
eric_allman sendmail 8.7.5
hp hp-ux 10.20
eric_allman sendmail 8.7.1
sco internet_faststart 1.0
hp hp-ux 10.10
sco openserver 5.0
ibm aix 3.2
ibm aix 4.2
redhat linux 3.0.3
hp hp-ux 10.01
ibm aix 4.1
sco openserver 5.0.2
eric_allman sendmail 8.6
eric_allman sendmail 8.7.2
eric_allman sendmail 8.7.3
eric_allman sendmail 8.7.4
freebsd freebsd 2.1.5
bsdi bsd_os 2.1
CVE-1999-0153 MEDIUM

Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
microsoft windows_nt *
sco openserver 5.0
microsoft windows_95 *
microsoft windows_2000 *
CVE-1999-0345 MEDIUM

Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
ibm sng 2.1
sun sunos *
freebsd freebsd 1.0
sco internet_faststart 1.0
freebsd freebsd 1.1
freebsd freebsd 1.1.5.1
freebsd freebsd 2.0.5
sco openserver 5
freebsd freebsd 1.2
sco internet_faststart 1.1
ibm aix 3.2
ibm aix 4.2
freebsd freebsd 2.0
ibm sng 2.2
ibm aix 4.1
sco open_desktop 3
CVE-1999-0368 HIGH

Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
caldera openlinux 1.3
redhat linux 5.1
slackware slackware_linux 3.4
debian debian_linux 2.0
washington_university wu-ftpd 2.4.2_beta18
slackware slackware_linux 3.6
washington_university wu-ftpd 2.4.2_beta18_vr9
sco openserver 5.0.4
slackware slackware_linux 3.5
sco openserver 5.0
sco openserver 5.0.3
sco unixware 7.0
proftpd_project proftpd 1.2_pre1
sco openserver 5.0.2
redhat linux 5.0
sco unixware 7.0.1
sco openserver 5.0.5
CVE-1999-0411 HIGH

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5
sco openserver 3.0
CVE-1999-0476 HIGH

A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver *
CVE-1999-0524 LOW

ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.

CVSS 2.0

Severity: LOW

Problem Type: CWE-200,NVD-CWE-noinfo,CWE-200,

Products Affected

Vendor Product Version
hp tru64 -
cisco ios -
microsoft windows -
hp hp-ux -
sgi irix -
windriver bsdos -
ibm aix -
ibm os2 -
linux linux_kernel -
apple mac_os_x -
apple macos -
oracle solaris -
novell netware -
sco sco_unix -
CVE-1999-0693 HIGH

Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
hp hp-ux 11
hp hp-ux 10
ibm aix 4
sco unixware 7
CVE-1999-0697 HIGH

SCO Doctor allows local users to gain root privileges through a Tools option.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.4
sco openserver 5.0.5
CVE-1999-0798 HIGH

Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco internet_faststart *
openbsd openbsd 2.3
openbsd openbsd 2.4
freebsd freebsd 6.2
redhat linux *
sco openserver *
sco unixware 7.0
sco unixware 7.0.1
bsdi bsd_os *
CVE-1999-0825 LOW

The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.0
sco unixware 7.1
sco unixware 7.0.1
CVE-1999-0828 LOW

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.0
sco unixware 7.1
CVE-1999-0830 HIGH

Buffer overflow in SCO UnixWare Xsco command via a long argument.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.0
CVE-1999-0835 HIGH

Denial of service in BIND named via malformed SIG records.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5
sun sunos 5.7
sco unixware 2
sco unixware 7
ibm aix 4.3
CVE-1999-0836 HIGH

UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.0
sco unixware 7.1
sco unixware 7.0.1
CVE-1999-0845 HIGH

Buffer overflow in SCO su program allows local users to gain root access via a long username.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.0
CVE-1999-0851 LOW

Denial of service in BIND named via naptr.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5
sun sunos 5.7
sco unixware 2
sco unixware 7
ibm aix 4.3
CVE-1999-0864 HIGH

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.0
sco unixware 7.1
sco unixware 7.0.1
CVE-1999-0866 HIGH

Buffer overflow in UnixWare xauto program allows local users to gain root privilege.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.0
sco unixware 7.1
sco unixware 7.0.1
CVE-1999-0893 LOW

userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0
CVE-1999-0942 HIGH

UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1
CVE-1999-0979 HIGH

The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.0
sco unixware 7.1
sco unixware 7.0.1
CVE-1999-0988 HIGH

UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 2.1
sco unixware 7.1.1
sco unixware 7.0
sco unixware 7.1
sco unixware 2.0
sco unixware 7.1.16
sco unixware 7.0.1
sco unixware 2.0.3
CVE-1999-1041 HIGH

Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0
sco unix 3.2v4
CVE-1999-1138 HIGH

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco unix system_v386_3.2_operating_system_4.0
sco openserver 3.0
sco unix system_v386_3.2_operating_system_2.0
sco open_desktop 1.0
sco open_desktop 2.0
sco open_desktop_lite 3.0
sco unix system_v386_3.2_operating_system_4.x
sco unix system_v386_3.2_operating_system
CVE-1999-1162 MEDIUM

Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 1.1
sco unix *
sco open_desktop 2.0
CVE-1999-1185 HIGH

Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco cmw 3.0
sco openserver 5.0
sco internet_faststart all_versions
sco openserver 3.0
sco openserver_enterprise_system 5.0.4p
CVE-1999-1209 HIGH

Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco openserver 5.0
sco openserver 3.0
CVE-1999-1252 HIGH

Vulnerability in a certain system call in SCO UnixWare 2.0.x and 2.1.0 allows local users to access arbitrary files and gain root privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 2.0.x
sco unixware 2.1.0
CVE-1999-1253 HIGH

Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0
sco openserver *
sco internet_faststart 1.0
CVE-1999-1302 HIGH

Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-noinfo,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco unix *
sco unix 4.1
sco openserver_network_system 3.0
sco openserver_enterprise_system 3.0
sco open_desktop 2.0
sco unix 3.2
sco open_desktop_lite 3.0
sco unix 4.0
CVE-1999-1303 HIGH

Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco unix *
sco unix 4.1
sco openserver_network_system 3.0
sco openserver_enterprise_system 3.0
sco open_desktop 2.0
sco unix 3.2
sco open_desktop_lite 3.0
sco unix 4.0
CVE-1999-1304 HIGH

Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco unix *
sco unix 4.1
sco openserver_network_system 3.0
sco openserver_enterprise_system 3.0
sco open_desktop 2.0
sco unix 3.2
sco open_desktop_lite 3.0
sco unix 4.0
CVE-1999-1305 HIGH

Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop 3.0
sco unix *
sco unix 4.1
sco openserver_network_system 3.0
sco openserver_enterprise_system 3.0
sco open_desktop 2.0
sco unix 3.2
sco open_desktop_lite 3.0
sco unix 4.0
CVE-1999-1450 HIGH

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0
sco openserver *
sco openserver 5.0.2
sco unixware *
sco openserver 5.0.4
CVE-1999-1571 HIGH

Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.0
sco openserver 5.0.5
CVE-2000-0003 HIGH

Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware *
CVE-2000-0026 HIGH

Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
windowmaker wmmon 1.0b2
sco unixware 7.1
CVE-2000-0029 MEDIUM

UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1
CVE-2000-0099 HIGH

Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.0
sco unixware 7.0.1
sco unixware 7.0.0
CVE-2000-0130 HIGH

Buffer overflow in SCO scohelp program allows remote attackers to execute commands.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.0
sco unixware 7.1
sco unixware 7.0.1
CVE-2000-0147 LOW

snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.5
CVE-2000-0154 LOW

The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.1
CVE-2000-0158 HIGH

Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0
sco openserver 5.0.2
sco openserver 5.0.4
sco openserver 5.0.5
CVE-2000-0173 MEDIUM

Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.1
CVE-2000-0215 HIGH

Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.0
sco unixware 7.1
sco unixware 7.0.1
CVE-2000-0224 LOW

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco unixware 7.1
CVE-2000-0306 HIGH

Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver *
CVE-2000-0307 MEDIUM

Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_desktop *
sco openserver *
sco unixware *
CVE-2000-0308 HIGH

Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
netscape fasttrack_server 2.0
netscape fasttrack_server 2.01
sco unixware 7.0
netscape proxy_server 2.5
sco unixware *
netscape enterprise_server 2.0
CVE-2000-0348 HIGH

A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware *
CVE-2000-0349 MEDIUM

Vulnerability in the passthru driver in SCO UnixWare 7.1.0 allows an attacker to cause a denial of service.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware *
CVE-2000-0351 MEDIUM

Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware *
CVE-2000-0842 MEDIUM

The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.0
CVE-2000-1014 HIGH

Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.0
CVE-2001-0575 MEDIUM

Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6
CVE-2001-0576 MEDIUM

lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor Product Version
sco openserver *
CVE-2001-0577 HIGH

recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver *
CVE-2001-0578 MEDIUM

Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver *
CVE-2001-0579 HIGH

lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver *
CVE-2001-0587 HIGH

deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6
CVE-2001-0588 MEDIUM

sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6
CVE-2001-0627 LOW

vi as included with SCO OpenServer 5.0 - 5.0.6 allows a local attacker to overwrite arbitrary files via a symlink attack.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0
sco openserver 5.0.3
sco openserver 5.0.1
sco openserver 5.0.2
sco openserver 5.0.6
sco openserver 5.0.4
sco openserver 5.0.5
CVE-2001-0797 HIGH

Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sgi irix 3.3.3
sgi irix 3.2
sun sunos 5.5.1
sco openserver 5.0.6
sun solaris 2.6
hp hp-ux 11.00
hp hp-ux 10.10
hp hp-ux 10.24
sco openserver 5.0
sun sunos 5.7
sun sunos 5.3
sco openserver 5.0.1
sun solaris 7.0
sco openserver 5.0.2
sun sunos 5.2
hp hp-ux 11.0.4
sun solaris 2.4
hp hp-ux 11.11
sun sunos 5.1
sun sunos 5.0
sco openserver 5.0.5
sco openserver 5.0.6a
sun solaris 2.5
sun sunos 5.5
hp hp-ux 10.20
ibm aix 5.1
hp hp-ux 10.00
sun solaris 2.5.1
sco openserver 5.0.4
ibm aix 4.3
sun solaris 8.0
sgi irix 3.3
sun sunos -
sgi irix 3.3.2
sco openserver 5.0.3
sun sunos 5.4
hp hp-ux 10.01
ibm aix 4.3.3
sun sunos 5.8
ibm aix 4.3.2
sgi irix 3.3.1
ibm aix 4.3.1
CVE-2001-0896 MEDIUM

Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.5
CVE-2001-1148 MEDIUM

Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver *
CVE-2001-1508 MEDIUM

Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6a
sco openserver 5.0
sco openserver 5.0.3
sco openserver 5.0.1
sco openserver 5.0.2
sco openserver 5.0.4
sco openserver 5.0.5
CVE-2001-1578 LOW

Unknown vulnerability in SCO OpenServer 5.0.6 and earlier allows local users to modify critical information such as certain CPU registers and segment descriptors.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6
CVE-2001-1579 MEDIUM

The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco open_unix 8.0.0
sco unixware 7
CVE-2002-0716 HIGH

Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6
sco openserver 5.0.5
CVE-2002-1199 MEDIUM

The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
caldera openlinux 2.4
sun solaris 9.0
sco openserver 5.0.6a
caldera openlinux 2.2
sun sunos 5.7
caldera openlinux 2.3
sco openserver 5.0.6
sun sunos 5.8
sco openserver 5.0.5
CVE-2002-1323 MEDIUM

Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sgi irix 6.5.18m
sgi irix 6.5.11
sgi irix 6.5.18
sgi irix 6.5.4
sgi irix 6.5.7
sgi irix 6.5.3
sco unixware 7.1.3
sgi irix 6.5.17m
sgi irix 6.5.1
sgi irix 6.5.17
sun linux 5.0.7
sgi irix 6.5.21f
sgi irix 6.5.5
sgi irix 6.5.13
sgi irix 6.5.18f
sgi irix 6.5.14
sgi irix 6.5.12
sgi irix 6.5.19m
sgi irix 6.5.19
sgi irix 6.5.21m
sun solaris 9.0
safe.pm safe.pm 2.0_7
sgi irix 6.5.19f
sgi irix 6.5.8
sgi irix 6.5.20m
sgi irix 6.5.10
sgi irix 6.5.17f
sgi irix 6.5
sgi irix 6.5.16
sgi irix 6.5.2
sco unixware 7.1.2
sgi irix 6.5.15
sun solaris 8.0
safe.pm safe.pm 2.0_6
redhat linux_advanced_workstation 2.1
sgi irix 6.5.22
sco open_unix 8.0
sgi irix 6.5.9
sgi irix 6.5.20f
sun sunos 5.8
sgi irix 6.5.6
redhat enterprise_linux 2.1
CVE-2002-1998 HIGH

Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco open_unix 8.0.0
CVE-2003-0282 LOW

Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
info-zip unzip 5.50
sco openlinux_workstation 3.1.1
sco openlinux_server 3.1.1
CVE-2003-0597 HIGH

Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.7
sco openserver 5.0.6
CVE-2003-0658 MEDIUM

Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.3
caldera openserver 5.0.7
caldera openlinux_workstation 3.1.1
caldera openlinux_server 3.1.1
CVE-2003-0742 HIGH

SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.7
sco openserver 5.0.6
sco openserver 5.0.5
CVE-2003-0791 HIGH

The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H 3.9 5.9

CVSS 2.0

Severity: HIGH

Problem Type: CWE-502,

Products Affected

Vendor Product Version
sco openserver 5.0.7
mozilla mozilla *
CVE-2003-0834 HIGH

Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco open_unix 8.0
sco unixware 7.1.3
CVE-2003-0872 LOW

Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.5
CVE-2003-0914 MEDIUM

ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
isc bind 8.3.4
freebsd freebsd 4.6.2
isc bind 8.2.4
sun solaris 7.0
freebsd freebsd 4.8
compaq tru64 5.1a_pk4_bl21
compaq tru64 5.1a_pk1_bl1
isc bind 8.3.6
compaq tru64 5.1a_pk3_bl3
isc bind 8.3.1
compaq tru64 5.1b_pk1_bl1
isc bind 8.4
sun solaris 9.0
freebsd freebsd 4.7
compaq tru64 4.0f_pk8_bl22
isc bind 8.3.2
compaq tru64 5.1_pk5_bl19
compaq tru64 5.1a
isc bind 8.3.0
sun solaris 8.0
nixu namesurfer standard_3.0.1
compaq tru64 5.1a_pk2_bl2
isc bind 8.2.5
sun sunos 5.8
compaq tru64 5.1_pk3_bl17
compaq tru64 5.1b
hp hp-ux 11.00
freebsd freebsd 4.6
isc bind 8.3.5
compaq tru64 4.0g
isc bind 8.2.3
sun sunos 5.7
compaq tru64 5.1_pk4_bl18
hp hp-ux 11.11
freebsd freebsd 5.0
netbsd netbsd 1.6.1
netbsd netbsd 1.6
sco unixware 7.1.1
freebsd freebsd 4.4
compaq tru64 5.1
compaq tru64 5.1a_pk5_bl23
nixu namesurfer suite_3.0.1
compaq tru64 5.1b_pk2_bl22
ibm aix 5.1l
isc bind 8.2.6
isc bind 8.3.3
compaq tru64 4.0f_pk7_bl18
netbsd netbsd current
isc bind 8.2.7
compaq tru64 4.0f
compaq tru64 4.0f_pk6_bl17
compaq tru64 4.0g_pk3_bl17
compaq tru64 5.1_pk6_bl20
isc bind 8.4.1
freebsd freebsd 4.5
freebsd freebsd 4.9
compaq tru64 4.0g_pk4_bl22
CVE-2003-0937 MEDIUM

SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.1
sco open_unix 8.0
sco unixware 7.1.3
CVE-2004-0079 MEDIUM

The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H 3.9 3.6

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-476,CWE-476,

Products Affected

Vendor Product Version
cisco ios 12.1(11b)e12
openssl openssl 0.9.6g
cisco webns 7.10
openssl openssl 0.9.6k
cisco pix_firewall_software 6.0(4)
stonesoft stonegate 1.5.18
avaya vsu 500
dell bsafe_ssl-j 3.0
cisco ios 12.1(19)e1
neoteris instant_virtual_extranet 3.0
stonesoft stonegate 2.0.8
openssl openssl 0.9.7c
securecomputing sidewinder 5.2.1
cisco firewall_services_module *
symantec clientless_vpn_gateway_4400 5.0
cisco webns 7.10_.0.06s
cisco pix_firewall_software 6.3(3.102)
stonesoft stonegate 2.0.1
cisco pix_firewall_software 6.1(1)
stonesoft stonegate_vpn_client 2.0.9
cisco pix_firewall_software 6.1
vmware gsx_server 3.0_build_7592
cisco ios 12.2za
sun crypto_accelerator_4000 1.0
redhat linux 8.0
checkpoint vpn-1 next_generation_fp1
sco openserver 5.0.7
checkpoint firewall-1 next_generation_fp2
openssl openssl 0.9.7
novell imanager 2.0
apple mac_os_x_server 10.3.3
cisco pix_firewall_software 6.2
stonesoft stonebeat_securitycluster 2.5
stonesoft stonegate 1.5.17
avaya s8500 r2.0.1
tarantella tarantella_enterprise 3.40
openssl openssl 0.9.6f
cisco okena_stormwatch 3.2
lite speed_technologies_litespeed_web_server 1.1.1
sco openserver 5.0.6
stonesoft stonebeat_fullcluster 2.5
hp hp-ux 11.00
checkpoint firewall-1 2.0
stonesoft stonebeat_fullcluster 2.0
cisco webns 7.2_0.0.03
stonesoft stonegate_vpn_client 1.7.2
cisco ios 12.1(11)e
lite speed_technologies_litespeed_web_server 1.2_rc2
avaya intuity_audix 5.1.46
securecomputing sidewinder 5.2.0.04
stonesoft stonegate 2.2.1
stonesoft stonebeat_fullcluster 1_3.0
cisco pix_firewall_software 6.3(2)
avaya sg208 *
4d webstar 5.2
vmware gsx_server 2.0
cisco ios 12.1(11b)e
4d webstar 5.2.1
cisco webns 6.10_b4
neoteris instant_virtual_extranet 3.2
stonesoft stonegate 1.6.2
avaya vsu 100_r2.0.1
openssl openssl 0.9.6j
novell edirectory 8.5.12a
lite speed_technologies_litespeed_web_server 1.1
freebsd freebsd 4.9
cisco access_registrar *
stonesoft stonegate 1.6.3
novell edirectory 8.5.27
apple mac_os_x 10.3.3
openbsd openbsd 3.4
cisco pix_firewall_software 6.3(1)
avaya vsu 10000_r2.0.1
stonesoft stonegate 2.1
stonesoft stonegate_vpn_client 2.0.7
securecomputing sidewinder 5.2
stonesoft stonegate 2.0.4
redhat enterprise_linux_desktop 3.0
cisco css_secure_content_accelerator 2.0
cisco pix_firewall_software 6.2(1)
cisco ciscoworks_common_management_foundation 2.1
stonesoft stonegate 2.2
avaya intuity_audix s3210
securecomputing sidewinder 5.2.0.02
novell edirectory 8.6.2
avaya s8700 r2.0.0
stonesoft stonebeat_webcluster 2.0
stonesoft stonegate 2.0.7
securecomputing sidewinder 5.2.0.03
securecomputing sidewinder 5.2.1.02
cisco ios 12.2(14)sy1
stonesoft stonegate 1.7.1
avaya sg5 4.2
4d webstar 5.2.4
cisco pix_firewall_software 6.0(3)
cisco ios 12.1(11b)e14
freebsd freebsd 5.2
avaya sg203 4.31.29
stonesoft stonegate_vpn_client 1.7
redhat openssl 0.9.6b-3
cisco gss_4490_global_site_selector *
freebsd freebsd 5.1
redhat enterprise_linux 3.0
cisco application_and_content_networking_software *
stonesoft stonebeat_fullcluster 1_2.0
openbsd openbsd 3.3
avaya sg5 4.4
sgi propack 2.4
securecomputing sidewinder 5.2.0.01
checkpoint firewall-1 *
hp wbem a.01.05.08
hp wbem a.02.00.00
stonesoft stonegate 2.0.6
cisco pix_firewall_software 6.1(2)
freebsd freebsd 5.2.1
avaya s8700 r2.0.1
checkpoint provider-1 4.1
openssl openssl 0.9.7b
cisco content_services_switch_11500 *
cisco pix_firewall_software 6.1(5)
cisco css11000_content_services_switch *
bluecoat proxysg *
lite speed_technologies_litespeed_web_server 1.3_rc1
cisco pix_firewall_software 6.3
lite speed_technologies_litespeed_web_server 1.0.3
sgi propack 2.3
lite speed_technologies_litespeed_web_server 1.3
avaya intuity_audix *
4d webstar 5.2.3
cisco pix_firewall_software 6.0(1)
vmware gsx_server 2.5.1_build_5336
avaya s8500 r2.0.0
cisco call_manager *
avaya vsu 5x
avaya s8300 r2.0.0
avaya sg208 4.4
stonesoft stonebeat_securitycluster 2.0
cisco pix_firewall_software 6.1(3)
redhat openssl 0.9.6-15
4d webstar 5.3
avaya vsu 7500_r2.0.1
lite speed_technologies_litespeed_web_server 1.2.2
neoteris instant_virtual_extranet 3.3.1
stonesoft stonegate 2.2.4
cisco ios 12.2sy
checkpoint vpn-1 vsx_ng_with_application_intelligence
avaya intuity_audix s3400
lite speed_technologies_litespeed_web_server 1.2.1
cisco pix_firewall_software 6.1(4)
cisco ios 12.1(13)e9
cisco gss_4480_global_site_selector *
hp apache-based_web_server 2.0.43.00
cisco ios 12.2(14)sy
openssl openssl 0.9.6h
novell imanager 1.5
neoteris instant_virtual_extranet 3.1
cisco mds_9000 *
lite speed_technologies_litespeed_web_server 1.0.2
neoteris instant_virtual_extranet 3.3
novell edirectory 8.5
bluecoat cacheos_ca_sa 4.1.10
stonesoft stonegate 2.0.9
checkpoint vpn-1 next_generation_fp2
vmware gsx_server 2.0.1_build_2129
4d webstar 4.0
novell edirectory 8.7
avaya s8300 r2.0.1
dell bsafe_ssl-j 3.1
stonesoft servercluster 2.5.2
avaya sg203 4.4
cisco pix_firewall_software 6.0(2)
hp hp-ux 11.11
4d webstar 5.3.1
hp wbem a.02.00.01
cisco pix_firewall_software 6.2(2)
cisco firewall_services_module 1.1.3
novell edirectory 8.0
cisco secure_content_accelerator 10000
lite speed_technologies_litespeed_web_server 1.3_rc2
hp hp-ux 8.05
lite speed_technologies_litespeed_web_server 1.2_rc1
stonesoft stonegate 2.0.5
hp hp-ux 11.23
sgi propack 3.0
cisco pix_firewall_software 6.0(4.101)
stonesoft stonegate 1.7
cisco pix_firewall_software 6.3(3.109)
vmware gsx_server 2.5.1
cisco webns 7.1_0.1.02
novell edirectory 8.7.1
openssl openssl 0.9.6i
bluecoat cacheos_ca_sa 4.1.12
cisco css_secure_content_accelerator 1.0
avaya sg200 4.4
lite speed_technologies_litespeed_web_server 1.3_rc3
stonesoft stonegate_vpn_client 2.0.8
openssl openssl 0.9.6e
stonesoft stonegate 1.7.2
cisco firewall_services_module 1.1_(3.005)
checkpoint firewall-1 next_generation_fp0
freebsd freebsd 4.8
cisco firewall_services_module 2.1_(0.208)
cisco ciscoworks_common_services 2.2
cisco threat_response *
cisco firewall_services_module 1.1.2
avaya converged_communications_server 2.0
4d webstar 5.2.2
redhat openssl 0.9.7a-2
stonesoft stonebeat_fullcluster 3.0
redhat linux 7.3
avaya sg200 4.31.29
avaya vsu 5000_r2.0.1
stonesoft stonebeat_webcluster 2.5
redhat linux 7.2
cisco webns 6.10
tarantella tarantella_enterprise 3.30
lite speed_technologies_litespeed_web_server 1.0.1
checkpoint vpn-1 next_generation_fp0
avaya sg5 4.3
avaya vsu 5
openssl openssl 0.9.6d
hp aaa_server *
openssl openssl 0.9.6c
checkpoint firewall-1 next_generation_fp1
cisco pix_firewall_software 6.2(3)
cisco webns 7.1_0.2.06
cisco pix_firewall 6.2.2_.111
avaya vsu 2000_r2.0.1
stonesoft servercluster 2.5
lite speed_technologies_litespeed_web_server 1.3.1
cisco pix_firewall_software 6.2(3.100)
stonesoft stonegate_vpn_client 2.0
cisco pix_firewall_software 6.0
dell bsafe_ssl-j 3.0.1
openssl openssl 0.9.7a
tarantella tarantella_enterprise 3.20
hp apache-based_web_server 2.0.43.04
CVE-2004-0081 MEDIUM

OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
cisco ios 12.1(11b)e12
openssl openssl 0.9.6g
cisco webns 7.10
openssl openssl 0.9.6k
cisco pix_firewall_software 6.0(4)
stonesoft stonegate 1.5.18
avaya vsu 500
dell bsafe_ssl-j 3.0
cisco ios 12.1(19)e1
neoteris instant_virtual_extranet 3.0
stonesoft stonegate 2.0.8
openssl openssl 0.9.7c
securecomputing sidewinder 5.2.1
cisco firewall_services_module *
symantec clientless_vpn_gateway_4400 5.0
cisco webns 7.10_.0.06s
cisco pix_firewall_software 6.3(3.102)
stonesoft stonegate 2.0.1
cisco pix_firewall_software 6.1(1)
stonesoft stonegate_vpn_client 2.0.9
cisco pix_firewall_software 6.1
vmware gsx_server 3.0_build_7592
cisco ios 12.2za
sun crypto_accelerator_4000 1.0
redhat linux 8.0
checkpoint vpn-1 next_generation_fp1
sco openserver 5.0.7
checkpoint firewall-1 next_generation_fp2
openssl openssl 0.9.7
novell imanager 2.0
apple mac_os_x_server 10.3.3
cisco pix_firewall_software 6.2
stonesoft stonebeat_securitycluster 2.5
stonesoft stonegate 1.5.17
avaya s8500 r2.0.1
tarantella tarantella_enterprise 3.40
openssl openssl 0.9.6f
cisco okena_stormwatch 3.2
lite speed_technologies_litespeed_web_server 1.1.1
sco openserver 5.0.6
stonesoft stonebeat_fullcluster 2.5
hp hp-ux 11.00
checkpoint firewall-1 2.0
stonesoft stonebeat_fullcluster 2.0
cisco webns 7.2_0.0.03
stonesoft stonegate_vpn_client 1.7.2
cisco ios 12.1(11)e
lite speed_technologies_litespeed_web_server 1.2_rc2
avaya intuity_audix 5.1.46
securecomputing sidewinder 5.2.0.04
stonesoft stonegate 2.2.1
stonesoft stonebeat_fullcluster 1_3.0
cisco pix_firewall_software 6.3(2)
avaya sg208 *
4d webstar 5.2
vmware gsx_server 2.0
cisco ios 12.1(11b)e
4d webstar 5.2.1
cisco webns 6.10_b4
neoteris instant_virtual_extranet 3.2
stonesoft stonegate 1.6.2
avaya vsu 100_r2.0.1
openssl openssl 0.9.6j
novell edirectory 8.5.12a
lite speed_technologies_litespeed_web_server 1.1
freebsd freebsd 4.9
cisco access_registrar *
stonesoft stonegate 1.6.3
novell edirectory 8.5.27
apple mac_os_x 10.3.3
openbsd openbsd 3.4
cisco pix_firewall_software 6.3(1)
avaya vsu 10000_r2.0.1
stonesoft stonegate 2.1
stonesoft stonegate_vpn_client 2.0.7
securecomputing sidewinder 5.2
stonesoft stonegate 2.0.4
redhat enterprise_linux_desktop 3.0
cisco css_secure_content_accelerator 2.0
cisco pix_firewall_software 6.2(1)
cisco ciscoworks_common_management_foundation 2.1
stonesoft stonegate 2.2
avaya intuity_audix s3210
securecomputing sidewinder 5.2.0.02
novell edirectory 8.6.2
avaya s8700 r2.0.0
stonesoft stonebeat_webcluster 2.0
stonesoft stonegate 2.0.7
securecomputing sidewinder 5.2.0.03
securecomputing sidewinder 5.2.1.02
cisco ios 12.2(14)sy1
stonesoft stonegate 1.7.1
avaya sg5 4.2
4d webstar 5.2.4
cisco pix_firewall_software 6.0(3)
cisco ios 12.1(11b)e14
freebsd freebsd 5.2
avaya sg203 4.31.29
stonesoft stonegate_vpn_client 1.7
redhat openssl 0.9.6b-3
cisco gss_4490_global_site_selector *
freebsd freebsd 5.1
redhat enterprise_linux 3.0
cisco application_and_content_networking_software *
stonesoft stonebeat_fullcluster 1_2.0
openbsd openbsd 3.3
avaya sg5 4.4
sgi propack 2.4
securecomputing sidewinder 5.2.0.01
checkpoint firewall-1 *
hp wbem a.01.05.08
hp wbem a.02.00.00
stonesoft stonegate 2.0.6
cisco pix_firewall_software 6.1(2)
checkpoint vpn-1 next_generation
freebsd freebsd 5.2.1
avaya s8700 r2.0.1
checkpoint provider-1 4.1
openssl openssl 0.9.7b
cisco content_services_switch_11500 *
cisco pix_firewall_software 6.1(5)
cisco css11000_content_services_switch *
bluecoat proxysg *
lite speed_technologies_litespeed_web_server 1.3_rc1
cisco pix_firewall_software 6.3
lite speed_technologies_litespeed_web_server 1.0.3
sgi propack 2.3
lite speed_technologies_litespeed_web_server 1.3
avaya intuity_audix *
4d webstar 5.2.3
cisco pix_firewall_software 6.0(1)
vmware gsx_server 2.5.1_build_5336
avaya s8500 r2.0.0
cisco call_manager *
avaya vsu 5x
avaya s8300 r2.0.0
avaya sg208 4.4
stonesoft stonebeat_securitycluster 2.0
cisco pix_firewall_software 6.1(3)
redhat openssl 0.9.6-15
4d webstar 5.3
avaya vsu 7500_r2.0.1
lite speed_technologies_litespeed_web_server 1.2.2
neoteris instant_virtual_extranet 3.3.1
stonesoft stonegate 2.2.4
cisco ios 12.2sy
checkpoint vpn-1 vsx_ng_with_application_intelligence
avaya intuity_audix s3400
lite speed_technologies_litespeed_web_server 1.2.1
cisco pix_firewall_software 6.1(4)
cisco ios 12.1(13)e9
cisco gss_4480_global_site_selector *
hp apache-based_web_server 2.0.43.00
cisco ios 12.2(14)sy
openssl openssl 0.9.6h
novell imanager 1.5
neoteris instant_virtual_extranet 3.1
cisco mds_9000 *
lite speed_technologies_litespeed_web_server 1.0.2
neoteris instant_virtual_extranet 3.3
novell edirectory 8.5
bluecoat cacheos_ca_sa 4.1.10
stonesoft stonegate 2.0.9
vmware gsx_server 2.0.1_build_2129
4d webstar 4.0
novell edirectory 8.7
avaya s8300 r2.0.1
dell bsafe_ssl-j 3.1
stonesoft servercluster 2.5.2
avaya sg203 4.4
cisco pix_firewall_software 6.0(2)
hp hp-ux 11.11
4d webstar 5.3.1
hp wbem a.02.00.01
cisco pix_firewall_software 6.2(2)
cisco firewall_services_module 1.1.3
novell edirectory 8.0
cisco secure_content_accelerator 10000
lite speed_technologies_litespeed_web_server 1.3_rc2
hp hp-ux 8.05
lite speed_technologies_litespeed_web_server 1.2_rc1
stonesoft stonegate 2.0.5
hp hp-ux 11.23
sgi propack 3.0
cisco pix_firewall_software 6.0(4.101)
stonesoft stonegate 1.7
cisco pix_firewall_software 6.3(3.109)
vmware gsx_server 2.5.1
cisco webns 7.1_0.1.02
novell edirectory 8.7.1
openssl openssl 0.9.6i
bluecoat cacheos_ca_sa 4.1.12
cisco css_secure_content_accelerator 1.0
avaya sg200 4.4
lite speed_technologies_litespeed_web_server 1.3_rc3
stonesoft stonegate_vpn_client 2.0.8
openssl openssl 0.9.6e
stonesoft stonegate 1.7.2
cisco firewall_services_module 1.1_(3.005)
checkpoint firewall-1 next_generation_fp0
freebsd freebsd 4.8
cisco firewall_services_module 2.1_(0.208)
cisco ciscoworks_common_services 2.2
cisco threat_response *
cisco firewall_services_module 1.1.2
avaya converged_communications_server 2.0
4d webstar 5.2.2
redhat openssl 0.9.7a-2
stonesoft stonebeat_fullcluster 3.0
redhat linux 7.3
avaya sg200 4.31.29
avaya vsu 5000_r2.0.1
stonesoft stonebeat_webcluster 2.5
redhat linux 7.2
cisco webns 6.10
tarantella tarantella_enterprise 3.30
lite speed_technologies_litespeed_web_server 1.0.1
checkpoint vpn-1 next_generation_fp0
avaya sg5 4.3
avaya vsu 5
openssl openssl 0.9.6d
hp aaa_server *
openssl openssl 0.9.6c
checkpoint firewall-1 next_generation_fp1
cisco pix_firewall_software 6.2(3)
cisco webns 7.1_0.2.06
cisco pix_firewall 6.2.2_.111
avaya vsu 2000_r2.0.1
stonesoft servercluster 2.5
lite speed_technologies_litespeed_web_server 1.3.1
cisco pix_firewall_software 6.2(3.100)
stonesoft stonegate_vpn_client 2.0
cisco pix_firewall_software 6.0
dell bsafe_ssl-j 3.0.1
openssl openssl 0.9.7a
tarantella tarantella_enterprise 3.20
hp apache-based_web_server 2.0.43.04
CVE-2004-0112 MEDIUM

The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-125,

Products Affected

Vendor Product Version
cisco ios 12.1(11b)e12
openssl openssl 0.9.6g
cisco webns 7.10
openssl openssl 0.9.6k
cisco pix_firewall_software 6.0(4)
avaya vsu 500
dell bsafe_ssl-j 3.0
cisco ios 12.1(19)e1
neoteris instant_virtual_extranet 3.0
openssl openssl 0.9.7c
securecomputing sidewinder 5.2.1
cisco firewall_services_module *
symantec clientless_vpn_gateway_4400 5.0
cisco webns 7.10_.0.06s
forcepoint stonegate 2.0.1
cisco pix_firewall_software 6.3(3.102)
cisco pix_firewall_software 6.1(1)
cisco pix_firewall_software 6.1
vmware gsx_server 3.0_build_7592
forcepoint stonegate 2.0.7
cisco ios 12.2za
sun crypto_accelerator_4000 1.0
redhat linux 8.0
checkpoint vpn-1 next_generation_fp1
sco openserver 5.0.7
checkpoint firewall-1 next_generation_fp2
openssl openssl 0.9.7
novell imanager 2.0
apple mac_os_x_server 10.3.3
cisco pix_firewall_software 6.2
stonesoft stonebeat_securitycluster 2.5
avaya s8500 r2.0.1
tarantella tarantella_enterprise 3.40
openssl openssl 0.9.6f
cisco okena_stormwatch 3.2
sco openserver 5.0.6
stonesoft stonebeat_fullcluster 2.5
hp hp-ux 11.00
checkpoint firewall-1 2.0
stonesoft stonebeat_fullcluster 2.0
cisco webns 7.2_0.0.03
cisco ios 12.1(11)e
avaya intuity_audix 5.1.46
securecomputing sidewinder 5.2.0.04
stonesoft stonebeat_fullcluster 1_3.0
cisco pix_firewall_software 6.3(2)
avaya sg208 *
forcepoint stonegate 1.7.1
4d webstar 5.2
vmware gsx_server 2.0
cisco ios 12.1(11b)e
4d webstar 5.2.1
cisco webns 6.10_b4
neoteris instant_virtual_extranet 3.2
avaya vsu 100_r2.0.1
openssl openssl 0.9.6j
forcepoint stonegate 2.2.4
novell edirectory 8.5.12a
freebsd freebsd 4.9
cisco access_registrar *
novell edirectory 8.5.27
apple mac_os_x 10.3.3
openbsd openbsd 3.4
cisco pix_firewall_software 6.3(1)
avaya vsu 10000_r2.0.1
forcepoint stonegate 1.5.18
securecomputing sidewinder 5.2
redhat enterprise_linux_desktop 3.0
cisco css_secure_content_accelerator 2.0
cisco pix_firewall_software 6.2(1)
cisco ciscoworks_common_management_foundation 2.1
forcepoint stonegate 2.0.9
avaya intuity_audix s3210
securecomputing sidewinder 5.2.0.02
novell edirectory 8.6.2
avaya s8700 r2.0.0
stonesoft stonebeat_webcluster 2.0
forcepoint stonegate 2.0.4
securecomputing sidewinder 5.2.0.03
securecomputing sidewinder 5.2.1.02
cisco ios 12.2(14)sy1
avaya sg5 4.2
4d webstar 5.2.4
cisco pix_firewall_software 6.0(3)
cisco ios 12.1(11b)e14
freebsd freebsd 5.2
avaya sg203 4.31.29
redhat openssl 0.9.6b-3
cisco gss_4490_global_site_selector *
freebsd freebsd 5.1
redhat enterprise_linux 3.0
cisco application_and_content_networking_software *
stonesoft stonebeat_fullcluster 1_2.0
openbsd openbsd 3.3
avaya sg5 4.4
sgi propack 2.4
securecomputing sidewinder 5.2.0.01
checkpoint firewall-1 *
forcepoint stonegate 1.5.17
hp wbem a.01.05.08
hp wbem a.02.00.00
cisco pix_firewall_software 6.1(2)
freebsd freebsd 5.2.1
avaya s8700 r2.0.1
checkpoint provider-1 4.1
openssl openssl 0.9.7b
cisco content_services_switch_11500 *
cisco pix_firewall_software 6.1(5)
cisco css11000_content_services_switch *
bluecoat proxysg *
cisco pix_firewall_software 6.3
sgi propack 2.3
forcepoint stonegate 1.6.3
forcepoint stonegate 1.7
avaya intuity_audix *
4d webstar 5.2.3
cisco pix_firewall_software 6.0(1)
vmware gsx_server 2.5.1_build_5336
avaya s8500 r2.0.0
cisco call_manager *
avaya vsu 5x
forcepoint stonegate 2.1
avaya s8300 r2.0.0
avaya sg208 4.4
stonesoft stonebeat_securitycluster 2.0
cisco pix_firewall_software 6.1(3)
redhat openssl 0.9.6-15
4d webstar 5.3
avaya vsu 7500_r2.0.1
neoteris instant_virtual_extranet 3.3.1
cisco ios 12.2sy
checkpoint vpn-1 vsx_ng_with_application_intelligence
avaya intuity_audix s3400
cisco pix_firewall_software 6.1(4)
cisco ios 12.1(13)e9
forcepoint stonegate 2.2.1
cisco gss_4480_global_site_selector *
hp apache-based_web_server 2.0.43.00
cisco ios 12.2(14)sy
forcepoint stonegate 2.0.8
openssl openssl 0.9.6h
novell imanager 1.5
neoteris instant_virtual_extranet 3.1
cisco mds_9000 *
neoteris instant_virtual_extranet 3.3
novell edirectory 8.5
bluecoat cacheos_ca_sa 4.1.10
checkpoint vpn-1 next_generation_fp2
forcepoint stonegate 1.7.2
vmware gsx_server 2.0.1_build_2129
4d webstar 4.0
novell edirectory 8.7
avaya s8300 r2.0.1
dell bsafe_ssl-j 3.1
stonesoft servercluster 2.5.2
avaya sg203 4.4
cisco pix_firewall_software 6.0(2)
hp hp-ux 11.11
4d webstar 5.3.1
hp wbem a.02.00.01
litespeedtech litespeed_web_server 1.0.1
cisco pix_firewall_software 6.2(2)
cisco firewall_services_module 1.1.3
novell edirectory 8.0
cisco secure_content_accelerator 10000
forcepoint stonegate 2.2
hp hp-ux 8.05
hp hp-ux 11.23
sgi propack 3.0
cisco pix_firewall_software 6.0(4.101)
forcepoint stonegate 1.6.2
cisco pix_firewall_software 6.3(3.109)
vmware gsx_server 2.5.1
cisco webns 7.1_0.1.02
novell edirectory 8.7.1
openssl openssl 0.9.6i
bluecoat cacheos_ca_sa 4.1.12
cisco css_secure_content_accelerator 1.0
avaya sg200 4.4
openssl openssl 0.9.6e
cisco firewall_services_module 1.1_(3.005)
checkpoint firewall-1 next_generation_fp0
freebsd freebsd 4.8
cisco firewall_services_module 2.1_(0.208)
cisco ciscoworks_common_services 2.2
cisco threat_response *
cisco firewall_services_module 1.1.2
avaya converged_communications_server 2.0
4d webstar 5.2.2
redhat openssl 0.9.7a-2
stonesoft stonebeat_fullcluster 3.0
redhat linux 7.3
avaya sg200 4.31.29
avaya vsu 5000_r2.0.1
stonesoft stonebeat_webcluster 2.5
redhat linux 7.2
cisco webns 6.10
tarantella tarantella_enterprise 3.30
checkpoint vpn-1 next_generation_fp0
forcepoint stonegate 2.0.6
avaya sg5 4.3
avaya vsu 5
openssl openssl 0.9.6d
hp aaa_server *
openssl openssl 0.9.6c
checkpoint firewall-1 next_generation_fp1
cisco pix_firewall_software 6.2(3)
cisco webns 7.1_0.2.06
forcepoint stonegate 2.0.5
cisco pix_firewall 6.2.2_.111
avaya vsu 2000_r2.0.1
stonesoft servercluster 2.5
cisco pix_firewall_software 6.2(3.100)
cisco pix_firewall_software 6.0
dell bsafe_ssl-j 3.0.1
openssl openssl 0.9.7a
tarantella tarantella_enterprise 3.20
hp apache-based_web_server 2.0.43.04
CVE-2004-0390 HIGH

SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.7
sco openserver 5.0.6
sco openserver 5.0.5
CVE-2004-0510 HIGH

Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6a
sco openserver 5.0.7
sco openserver 5.0.6
CVE-2004-0511 LOW

Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6a
sco openserver 5.0.7
sco openserver 5.0.6
CVE-2004-0512 LOW

Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a core dump.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6a
sco openserver 5.0.7
sco openserver 5.0.6
CVE-2004-0996 LOW

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
cscope cscope 15.4
sco unixware 7.1.1
cscope cscope 15.5
cscope cscope 15.1
debian debian_linux 3.0
sco unixware 7.1.3
cscope cscope 13.0
cscope cscope 15.3
gentoo linux *
CVE-2004-1039 MEDIUM

The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
sco unixware 7.1.1
sco openserver 5.0.7
sco unixware 7.1.3
sco openserver 5.0.6
CVE-2004-1082 HIGH

mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
apache http_server 1.3.22
apache http_server 1.3.28
hp virtualvault 4.5
apache http_server 1.3.25
avaya communication_manager 1.3.1
avaya mn100 *
hp webproxy a.02.00
openbsd openbsd 3.4
sco openserver 5.0.6
avaya intuity_audix_lx *
apache http_server 1.3.3
apache http_server 1.3.7
apache http_server 1.3.20
apache http_server 1.3.18
avaya modular_messaging_message_storage_server 1.1
apple apache_mod_digest_apple *
sun solaris 9.0
hp webproxy a.02.10
apache http_server 1.3.11
apache http_server 1.3.24
apache http_server 1.3.27
apache http_server 1.3.26
apache http_server 1.3.14
avaya communication_manager 2.0
apache http_server 1.3.12
apache http_server 1.3.23
avaya network_routing *
apache http_server 1.3.19
avaya modular_messaging_message_storage_server 2.0
sun solaris 8.0
apache http_server 1.3
apache http_server 1.3.29
avaya communication_manager 1.1
apache http_server 1.3.17
sco openserver 5.0.7
openbsd openbsd current
hp virtualvault 4.7
avaya communication_manager 2.0.1
apache http_server 1.3.4
ibm http_server 1.3.19
hp virtualvault 4.6
openbsd openbsd 3.5
sun sunos 5.8
apache http_server 1.3.6
apache http_server 1.3.9
apache http_server 1.3.1
CVE-2004-1124 MEDIUM

Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
sco unixware 7.1.1
sco openserver 5.0.7
sco unixware 7.1.3
sco openserver 5.0.6
CVE-2004-1131 HIGH

Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.7
sco openserver 5.0.6
CVE-2004-1307 HIGH

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
avaya interactive_response 1.3
apple mac_os_x 10.3.8
avaya call_management_system_server 9.0
apple mac_os_x 10.3.3
avaya call_management_system_server 12.0
libtiff libtiff 3.6.0
conectiva linux 10.0
avaya integrated_management *
apple mac_os_x_server 10.3.1
sun solaris 7.0
gentoo linux *
apple mac_os_x_server 10.3.8
f5 icontrol_service_manager 1.3.5
libtiff libtiff 3.5.5
avaya modular_messaging_message_storage_server 1.1
sun solaris 9.0
libtiff libtiff 3.5.4
conectiva linux 9.0
apple mac_os_x 10.3
apple mac_os_x 10.3.9
libtiff libtiff 3.5.3
sun solaris 8.0
avaya call_management_system_server 13.0
libtiff libtiff 3.5.7
apple mac_os_x_server 10.3.4
avaya interactive_response *
libtiff libtiff 3.4
sun sunos 5.8
apple mac_os_x_server 10.3
apple mac_os_x_server 10.3.3
apple mac_os_x_server 10.3.5
mandrakesoft mandrake_linux_corporate_server 3.0
avaya call_management_system_server 11.0
libtiff libtiff 3.5.1
apple mac_os_x 10.3.1
avaya mn100 *
libtiff libtiff 3.5.2
f5 icontrol_service_manager 1.3.4
avaya intuity_audix_lx *
f5 icontrol_service_manager 1.3.6
sun sunos 5.7
apple mac_os_x_server 10.3.9
libtiff libtiff 3.6.1
sun solaris 10.0
mandrakesoft mandrake_linux 10.0
apple mac_os_x_server 10.3.6
libtiff libtiff 3.7.0
apple mac_os_x 10.3.2
apple mac_os_x 10.3.7
avaya call_management_system_server 8.0
sgi propack 3.0
avaya modular_messaging_message_storage_server 2.0
apple mac_os_x_server 10.3.2
avaya interactive_response 1.2.1
apple mac_os_x 10.3.5
avaya cvlan *
mandrakesoft mandrake_linux 10.1
apple mac_os_x 10.3.4
apple mac_os_x_server 10.3.7
apple mac_os_x 10.3.6
f5 icontrol_service_manager 1.3
CVE-2005-0109 MEDIUM

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
freebsd freebsd 2.2.3
freebsd freebsd 2.2.6
freebsd freebsd 4.11
freebsd freebsd 4.2
freebsd freebsd 2.1.7.1
freebsd freebsd 3.5.1
freebsd freebsd 4.6.2
freebsd freebsd 2.2.2
freebsd freebsd 4.1
freebsd freebsd 2.0
redhat enterprise_linux_desktop 3.0
sun solaris 7.0
freebsd freebsd 4.8
freebsd freebsd 5.3
sun solaris 9.0
freebsd freebsd 4.7
freebsd freebsd 2.2.4
freebsd freebsd 5.4
freebsd freebsd 2.2.5
freebsd freebsd 3.4
freebsd freebsd 2.0.5
sun solaris 8.0
sco openserver 5.0.7
freebsd freebsd 2.2
freebsd freebsd 2.1.6
redhat enterprise_linux 2.1
freebsd freebsd 2.2.8
freebsd freebsd 4.0
sco unixware 7.1.3
freebsd freebsd 2.1.6.1
freebsd freebsd 3.0
freebsd freebsd 3.1
freebsd freebsd 4.1.1
freebsd freebsd 1.1.5.1
freebsd freebsd 4.6
redhat enterprise_linux 4.0
freebsd freebsd 5.2
redhat fedora_core core_3.0
freebsd freebsd 5.1
sun solaris 10.0
freebsd freebsd 3.2
redhat enterprise_linux 3.0
freebsd freebsd 4.10
freebsd freebsd 2.1.5
freebsd freebsd 5.0
freebsd freebsd 4.3
freebsd freebsd 3.5
freebsd freebsd 4.4
ubuntu ubuntu_linux 4.1
sco unixware 7.1.3_up
freebsd freebsd 3.3
freebsd freebsd 5.2.1
freebsd freebsd 4.5
freebsd freebsd 4.9
ubuntu ubuntu_linux 5.04
freebsd freebsd 2.1.0
redhat enterprise_linux_desktop 4.0
CVE-2005-0134 MEDIUM

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
sco unixware 7.1.1
sco unixware 7.1.3
CVE-2005-0351 MEDIUM

Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-119,

Products Affected

Vendor Product Version
sco openserver 5.0.7
sco openserver 5.0.6
CVE-2005-0993 MEDIUM

Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.7
sco openserver 5.0.6
CVE-2005-2132 LOW

RPC portmapper (rpcbind) in SCO UnixWare 7.1.1 m5, 7.1.3 mp5, and 7.1.4 mp2 allows remote attackers or local users to cause a denial of service (lack of response) via multiple invalid portmap requests.

CVSS 2.0

Severity: LOW

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.3_mp5
sco unixware 7.1.4_mp2
sco unixware 7.1.1_m5
CVE-2005-2926 MEDIUM

Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver *
CVE-2005-2927 HIGH

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
sco unixware 7.1.3
CVE-2005-2934 HIGH

Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
sco unixware 7.1.3
CVE-2005-3624 MEDIUM

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-189,

Products Affected

Vendor Product Version
kde kword 1.4.2
suse suse_linux 9.0
suse suse_linux 9.3
xpdf xpdf 3.0
tetex tetex 2.0
conectiva linux 10.0
kde koffice 1.4.1
redhat enterprise_linux_desktop 3.0
gentoo linux *
redhat linux 9.0
ubuntu ubuntu_linux 5.10
redhat fedora_core core_2.0
turbolinux turbolinux_desktop 10.0
easy_software_products cups 1.1.23
poppler poppler 0.4.2
debian debian_linux 3.1
slackware slackware_linux 10.2
suse suse_linux 10.0
turbolinux turbolinux_home *
kde koffice 1.4
sco openserver 5.0.7
trustix secure_linux 2.2
debian debian_linux 3.0
trustix secure_linux 2.0
redhat linux 7.3
tetex tetex 3.0
turbolinux turbolinux_workstation 8.0
slackware slackware_linux 10.1
turbolinux turbolinux 10
mandrakesoft mandrake_linux_corporate_server 3.0
tetex tetex 2.0.1
slackware slackware_linux 9.0
redhat enterprise_linux 2.1
sco openserver 6.0
slackware slackware_linux 10.0
easy_software_products cups 1.1.23_rc1
kde kpdf 3.4.3
suse suse_linux 9.1
mandrakesoft mandrake_linux 2006
kde kdegraphics 3.4.3
suse suse_linux 1.0
easy_software_products cups 1.1.22_rc1
suse suse_linux 9.2
tetex tetex 2.0.2
redhat fedora_core core_4.0
redhat enterprise_linux 4.0
turbolinux turbolinux_server 10.0
redhat fedora_core core_3.0
kde koffice 1.4.2
mandrakesoft mandrake_linux_corporate_server 2.1
turbolinux turbolinux_multimedia *
redhat enterprise_linux 3.0
slackware slackware_linux 9.1
turbolinux turbolinux_appliance_server 1.0_workgroup_edition
redhat fedora_core core_1.0
kde kpdf 3.2
ubuntu ubuntu_linux 4.1
turbolinux turbolinux_server 10.0_x86
libextractor libextractor *
sgi propack 3.0
turbolinux turbolinux_server 8.0
redhat linux_advanced_workstation 2.1
mandrakesoft mandrake_linux 10.2
kde kdegraphics 3.2
trustix secure_linux 3.0
turbolinux turbolinux_appliance_server 1.0_hosting_edition
easy_software_products cups 1.1.22
tetex tetex 1.0.7
mandrakesoft mandrake_linux 10.1
turbolinux turbolinux fuji
turbolinux turbolinux_personal *
ubuntu ubuntu_linux 5.04
redhat enterprise_linux_desktop 4.0
CVE-2005-3625 HIGH

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

CVSS 2.0

Severity: HIGH

Problem Type: CWE-399,

Products Affected

Vendor Product Version
kde kword 1.4.2
suse suse_linux 9.0
suse suse_linux 9.3
xpdf xpdf 3.0
tetex tetex 2.0
conectiva linux 10.0
kde koffice 1.4.1
redhat enterprise_linux_desktop 3.0
gentoo linux *
redhat linux 9.0
ubuntu ubuntu_linux 5.10
redhat fedora_core core_2.0
turbolinux turbolinux_desktop 10.0
easy_software_products cups 1.1.23
poppler poppler 0.4.2
debian debian_linux 3.1
slackware slackware_linux 10.2
suse suse_linux 10.0
turbolinux turbolinux_home *
kde koffice 1.4
sco openserver 5.0.7
trustix secure_linux 2.2
debian debian_linux 3.0
trustix secure_linux 2.0
redhat linux 7.3
tetex tetex 3.0
turbolinux turbolinux_workstation 8.0
slackware slackware_linux 10.1
turbolinux turbolinux 10
mandrakesoft mandrake_linux_corporate_server 3.0
tetex tetex 2.0.1
slackware slackware_linux 9.0
redhat enterprise_linux 2.1
sco openserver 6.0
slackware slackware_linux 10.0
easy_software_products cups 1.1.23_rc1
kde kpdf 3.4.3
suse suse_linux 9.1
mandrakesoft mandrake_linux 2006
kde kdegraphics 3.4.3
suse suse_linux 1.0
easy_software_products cups 1.1.22_rc1
suse suse_linux 9.2
tetex tetex 2.0.2
redhat fedora_core core_4.0
redhat enterprise_linux 4.0
turbolinux turbolinux_server 10.0
redhat fedora_core core_3.0
kde koffice 1.4.2
mandrakesoft mandrake_linux_corporate_server 2.1
turbolinux turbolinux_multimedia *
redhat enterprise_linux 3.0
slackware slackware_linux 9.1
turbolinux turbolinux_appliance_server 1.0_workgroup_edition
redhat fedora_core core_1.0
kde kpdf 3.2
ubuntu ubuntu_linux 4.1
turbolinux turbolinux_server 10.0_x86
libextractor libextractor *
sgi propack 3.0
turbolinux turbolinux_server 8.0
redhat linux_advanced_workstation 2.1
mandrakesoft mandrake_linux 10.2
kde kdegraphics 3.2
trustix secure_linux 3.0
turbolinux turbolinux_appliance_server 1.0_hosting_edition
easy_software_products cups 1.1.22
tetex tetex 1.0.7
mandrakesoft mandrake_linux 10.1
turbolinux turbolinux fuji
turbolinux turbolinux_personal *
ubuntu ubuntu_linux 5.04
redhat enterprise_linux_desktop 4.0
CVE-2005-3626 MEDIUM

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-399,

Products Affected

Vendor Product Version
kde kword 1.4.2
suse suse_linux 9.0
suse suse_linux 9.3
xpdf xpdf 3.0
tetex tetex 2.0
conectiva linux 10.0
kde koffice 1.4.1
redhat enterprise_linux_desktop 3.0
gentoo linux *
redhat linux 9.0
ubuntu ubuntu_linux 5.10
redhat fedora_core core_2.0
turbolinux turbolinux_desktop 10.0
easy_software_products cups 1.1.23
poppler poppler 0.4.2
debian debian_linux 3.1
slackware slackware_linux 10.2
suse suse_linux 10.0
turbolinux turbolinux_home *
kde koffice 1.4
sco openserver 5.0.7
trustix secure_linux 2.2
debian debian_linux 3.0
trustix secure_linux 2.0
redhat linux 7.3
tetex tetex 3.0
turbolinux turbolinux_workstation 8.0
slackware slackware_linux 10.1
turbolinux turbolinux 10
mandrakesoft mandrake_linux_corporate_server 3.0
tetex tetex 2.0.1
slackware slackware_linux 9.0
redhat enterprise_linux 2.1
sco openserver 6.0
slackware slackware_linux 10.0
easy_software_products cups 1.1.23_rc1
kde kpdf 3.4.3
suse suse_linux 9.1
mandrakesoft mandrake_linux 2006
kde kdegraphics 3.4.3
suse suse_linux 1.0
easy_software_products cups 1.1.22_rc1
suse suse_linux 9.2
tetex tetex 2.0.2
redhat fedora_core core_4.0
redhat enterprise_linux 4.0
turbolinux turbolinux_server 10.0
redhat fedora_core core_3.0
kde koffice 1.4.2
mandrakesoft mandrake_linux_corporate_server 2.1
turbolinux turbolinux_multimedia *
redhat enterprise_linux 3.0
slackware slackware_linux 9.1
turbolinux turbolinux_appliance_server 1.0_workgroup_edition
redhat fedora_core core_1.0
kde kpdf 3.2
ubuntu ubuntu_linux 4.1
turbolinux turbolinux_server 10.0_x86
libextractor libextractor *
sgi propack 3.0
turbolinux turbolinux_server 8.0
redhat linux_advanced_workstation 2.1
mandrakesoft mandrake_linux 10.2
kde kdegraphics 3.2
trustix secure_linux 3.0
turbolinux turbolinux_appliance_server 1.0_hosting_edition
easy_software_products cups 1.1.22
tetex tetex 1.0.7
mandrakesoft mandrake_linux 10.1
turbolinux turbolinux fuji
turbolinux turbolinux_personal *
ubuntu ubuntu_linux 5.04
redhat enterprise_linux_desktop 4.0
CVE-2005-3903 MEDIUM

Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco unixware 7.1.4
sco unixware 7.1.3
CVE-2006-0072 HIGH

Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.

CVSS 2.0

Severity: HIGH

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco openserver 5.0.6a
sco openserver 5.0
sco openserver 5.0.7
sco openserver 5.0.3
sco openserver 5.0.1
sco openserver 5.0.2
sco openserver 5.0.6
sco openserver 5.0.4
sco openserver 5.0.5
CVE-2011-1432 MEDIUM

The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.

CVSS 2.0

Severity: MEDIUM

Problem Type: NVD-CWE-Other,

Products Affected

Vendor Product Version
sco scoofficeserver *