Sco Open Desktop vulnerabilities
18 vulnerabilities
Known vulnerabilities in Sco Open Desktop, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-1999-1138scoopen_desktop+3
EPSS score1.56%
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.CVE-1999-1303scoopen_desktop+4EPSS score0.35%
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.CVE-1999-1304scoopen_desktop+4EPSS score0.35%
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.CVE-1999-1305scoopen_desktop+4EPSS score0.34%
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.CVE-1999-1209scoopen_desktop+1EPSS score0.39%
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.CVE-1999-1162scoopen_desktop+1EPSS score1.16%
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.CVE-1999-1302scoopen_desktop+4EPSS score0.35%
Unspecified vulnerability in pt_chmod in SCO UNIX 4.2 and earlier allows local users to gain root access.CVE-1999-1185scocmw+4EPSS score0.83%
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.CVE-1999-0019data_generaldg_ux+7EPSS score1.67%
Delete or create a file via rpc.statd, due to invalid information.CVE-1999-0033ncrmp-ras+4EPSS score0.63%
Command execution in Sun systems via buffer overflow in the at program.CVE-1999-0017calderaopenlinux+9EPSS score1.98%
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.CVE-1999-0024bsdibsd_os+11EPSS score4.98%
DNS cache poisoning via BIND, by predictable query IDs.CVE-1999-0010data_generaldg_ux+10EPSS score2.37%
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.CVE-1999-0011data_generaldg_ux+10EPSS score5.47%
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.CVE-1999-0023freebsdfreebsd+8EPSS score0.78%
Local user gains root privileges via buffer overflow in rdist, via lookup() function.CVE-1999-0345freebsdfreebsd+5EPSS score1.35%
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.CVE-1999-0128digitalosf_1+8EPSS score74.51%
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.CVE-1999-0009bsdibsd_os+12EPSS score29.01%
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.