Caldera Openlinux Workstation vulnerabilities

8 vulnerabilities

Known vulnerabilities in Caldera Openlinux Workstation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2003-0658calderaopenlinux_server+3
EPSS score
2.10%
Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.5CVE-2001-0851calderaopenlinux+6
EPSS score
3.09%
Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie.7.5CVE-2001-0980calderaopenlinux_server+1
EPSS score
2.35%
docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page.7.5CVE-2001-0869calderaopenlinux_eserver+4
EPSS score
3.00%
Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary commands.5CVE-2002-0835calderaopenlinux_server+3
EPSS score
6.94%
Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.4.6CVE-2002-0164calderaopenlinux_server+1
EPSS score
0.43%
Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges.4.6CVE-2002-0512calderaopenlinux_server+1
EPSS score
0.33%
startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries.7.2CVE-2002-0004calderaopenlinux_server+8
EPSS score
1.34%
Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.