Caldera vulnerabilities, page 3
77 vulnerabilities
Known vulnerabilities in Caldera products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 16 products.
CVE-1999-0434calderaopenlinux+4
EPSS score1.10%
XFree86 xfs command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service.CVE-1999-0042bsdibsd_os+5EPSS score12.73%
Buffer overflow in University of Washington's implementation of IMAP and POP servers.CVE-1999-0043bsdibsd_os+6EPSS score44.57%
Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.CVE-1999-0872calderaopenlinux+3EPSS score0.36%
Buffer overflow in Vixie cron allows local users to gain root access via a long MAILTO environment variable in a crontab file.CVE-1999-0880bsdibsd_os+1EPSS score1.39%
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.CVE-1999-0047bsdibsd_os+2EPSS score3.11%
MIME conversion buffer overflow in sendmail versions 8.8.3 and 8.8.4.CVE-1999-0002bsdibsd_os+2EPSS score27.86%
Buffer overflow in NFS mountd gives root access to remote attackers, mostly in Linux systems.CVE-1999-0879bsdibsd_os+1EPSS score9.74%
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via macro variables in a message file.CVE-1999-0368calderaopenlinux+7EPSS score39.84%
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.CVE-1999-0009bsdibsd_os+12EPSS score29.01%
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.CVE-1999-0769calderaopenlinux+3EPSS score0.80%
Vixie Cron on Linux systems allows local users to set parameters of sendmail commands via the MAILTO environmental variable.CVE-1999-0712calderacoas+1EPSS score0.40%
A vulnerability in Caldera Open Administration System (COAS) allows the /etc/shadow password file to be made world-readable.CVE-1999-0130bsdibsd_os+6EPSS score1.05%
Local users can start Sendmail in daemon mode and gain root privileges.CVE-1999-0731calderaopenlinuxEPSS score0.32%
The KDE klock program allows local users to unlock a session using malformed input.CVE-1999-0104calderaopenlinux+3EPSS score9.32%
A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.CVE-2002-1199calderaopenlinux+3EPSS score2.24%
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.CVE-2002-1231calderaopenunix+1EPSS score0.33%
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc.CVE-2002-0517calderaopenunix+1EPSS score0.46%
Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as (1) dtterm or (2) xterm.CVE-2002-0311calderaopenunix+1EPSS score4.54%
Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for (1) in scoadminreg.cgi or (2) service_action.cgi.CVE-2002-0678calderaopenunix+8EPSS score9.42%
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.