Caldera vulnerabilities
77 vulnerabilities
Known vulnerabilities in Caldera products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 16 products.
Products
16- Openlinux28 vulnerabilities
- Unixware20 vulnerabilities
- Openunix17 vulnerabilities
- Openlinux Eserver10 vulnerabilities
- Openlinux Edesktop8 vulnerabilities
- Openlinux Server8 vulnerabilities
- Openlinux Workstation8 vulnerabilities
- Openserver5 vulnerabilities
- Caldera4 vulnerabilities
- Openlinux Desktop3 vulnerabilities
- Openlinux Ebuilder3 vulnerabilities
- Coas1 vulnerabilities
- Network Desktop1 vulnerabilities
- Openlinux Lite1 vulnerabilities
- Volution1 vulnerabilities
- Volution Manager1 vulnerabilities
CVE-2003-0658calderaopenlinux_server+3
EPSS score2.10%
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.CVE-2014-2935calderacalderaEPSS score4.37%
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.CVE-2014-2934calderacalderaEPSS score1.54%
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.CVE-2014-2933calderacalderaEPSS score3.00%
Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname.CVE-2014-2936calderacalderaEPSS score1.61%
The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or an unspecified parameter to (2) PPD/index.php, (3) dirmng/docmd.php, or (4) dirmng/param.php.CVE-2001-1576calderaunixwareEPSS score0.53%
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.CVE-2001-1478calderaopenunix+1EPSS score0.45%
Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.CVE-2001-1359calderavolutionEPSS score2.85%
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.CVE-2001-1577calderaopenunix+1EPSS score1.28%
Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused.CVE-2001-1030calderaopenlinux_server+7EPSS score1.96%
Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which allows attackers to bypass the ACLs and conduct unauthorized activities such as port scanning.CVE-2001-1063calderaopenunix+1EPSS score0.39%
Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument.CVE-2001-1153calderaopenunixEPSS score0.42%
lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument.CVE-2001-1062calderaopenserverEPSS score0.43%
Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.CVE-2001-1164calderaunixwareEPSS score0.56%
Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5) uuxcmd, or (6) uuxqt.CVE-2001-0851calderaopenlinux+6EPSS score3.09%
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.CVE-2001-0858calderaopenunix+1EPSS score0.37%
Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges.CVE-2001-0178calderaopenlinux_edesktop+4EPSS score0.36%
kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges.CVE-2001-0139calderaopenlinux_desktop+6EPSS score0.34%
inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations.CVE-2001-0980calderaopenlinux_server+1EPSS score2.35%
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.CVE-2001-0869calderaopenlinux_eserver+4EPSS score3.00%
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.