Sco Openserver vulnerabilities, page 2
69 vulnerabilities
Known vulnerabilities in Sco Openserver, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2005-0109freebsdfreebsd+7
EPSS score0.51%
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.CVE-2005-3624conectivalinux+31EPSS score2.30%
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.CVE-2005-3625conectivalinux+31EPSS score3.82%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."CVE-2005-3626conectivalinux+31EPSS score3.38%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.CVE-2000-0307scoopenserver+1EPSS score1.09%
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.CVE-2000-0306scoopenserverEPSS score3.69%
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.CVE-2000-0158scoopenserverEPSS score1.83%
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.CVE-2000-0147scoopenserverEPSS score0.36%
snmpd in SCO OpenServer has an SNMP community string that is writable by default, which allows local attackers to modify the host's configuration.CVE-1999-1138scoopen_desktop+3EPSS score1.56%
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.CVE-1999-1450scoopenserver+1EPSS score1.57%
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.CVE-1999-1571scoopenserverEPSS score0.43%
Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.CVE-1999-1253scointernet_faststart+1EPSS score0.39%
Vulnerability in a kernel error handling routine in SCO OpenServer 5.0.2 and earlier, and SCO Internet FastStart 1.0, allows local users to gain root privileges.CVE-1999-1209scoopen_desktop+1EPSS score0.39%
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.CVE-1999-1041scoopenserver+1EPSS score1.05%
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.CVE-1999-1185scocmw+4EPSS score0.83%
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.CVE-1999-0851ibmaix+3EPSS score0.40%
Denial of service in BIND named via naptr.CVE-1999-0019data_generaldg_ux+7EPSS score1.67%
Delete or create a file via rpc.statd, due to invalid information.CVE-1999-0129bsdibsd_os+8EPSS score0.56%
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.CVE-1999-0033ncrmp-ras+4EPSS score0.63%
Command execution in Sun systems via buffer overflow in the at program.CVE-1999-0411scoopenserverEPSS score0.40%
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.