CveMateVulnerability intelligence

Caldera vulnerabilities, page 4

77 vulnerabilities

Known vulnerabilities in Caldera products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 16 products.

CVE-2002-0679calderaopenunix+723y ago02-04-2003 05:00

Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.CVE-2002-0887calderaopenserver23y ago02-04-2003 05:00

scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.CVE-2002-0835calderaopenlinux_server+322y ago01-09-2004 04:00

Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones.CVE-2002-0677calderaopenunix+824y ago12-07-2002 04:00

CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.CVE-2002-0164calderaopenlinux_server+124y ago05-04-2002 05:00

Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a denial of service or gain privileges.CVE-2002-0442calderaopenserver23y ago02-04-2003 05:00

Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.CVE-2002-0885calderaopenunix+224y ago31-08-2002 04:00

Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute arbitrary code, possibly via the functions (1) syserr and (2) error.CVE-2002-0105calderaunixware24y ago15-03-2002 05:00

CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.CVE-2002-0981calderaopenunix+123y ago02-04-2003 05:00

Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line.CVE-2002-0246calderaunixware23y ago02-04-2003 05:00

Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to read other message catalogs containing format strings from setuid programs such as vxprint.CVE-2002-0911calderavolution_manager23y ago02-04-2003 05:00

Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.CVE-2002-0987calderaopenunix+123y ago02-04-2003 05:00

X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges.CVE-2002-0827calderaopenunix+124y ago07-08-2002 04:00

Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.CVE-2002-0512calderaopenlinux_server+123y ago02-04-2003 05:00

startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to gain privileges of other users running startkde via Trojan horse libraries.CVE-2002-0884calderaopenunix+224y ago31-08-2002 04:00

Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to execute arbitrary code via format strings that are not properly handled in the functions (1) syserr and (2) error.CVE-2002-0004calderaopenlinux_server+824y ago25-06-2002 04:00

Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice.CVE-2002-0988calderaopenunix+123y ago02-04-2003 05:00

Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.