CVE-2006-4655: sco unixware

EPSS trend

Probability

0.90%

Chance of exploitation in the next 30 days

Percentile

59%

Versus all other CVEs

30-day change

0.00 pp

From 0.90% on 21-09-2026

21-09-202621-10-2026

EPSS score

0.90%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

exploit-databaselocalscoVerified
X11R6 < 6.4 XKEYBOARD (sco x86) - Local Buffer Overflow
Maturity: weaponized
exploit-databaselocalsolarisVerified
X11R6 < 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow
Maturity: weaponized
exploit-databaselocalsolarisVerified
X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (1)
Maturity: weaponized

Show all 4 exploits

exploit-databaselocalsolarisVerified
X11R6 < 6.4 XKEYBOARD (Solaris/SPARC) - Local Buffer Overflow (2)
Maturity: weaponized

References

15 links

www.vupen.com/english/advisories/2006/3529VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/19905VDB EntryX Refsource BID
sunsolve.sun.com/search/document.do?assetkey=1-26-102570-1Vendor AdvisoryX Refsource SUNALERT
www.securityfocus.com/archive/1/445579/100/0/threadedMailing ListX Refsource BUGTRAQ
securitytracker.com/id?1016806VDB EntryX Refsource SECTRACK
secunia.com/advisories/21856Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2006/3525VDB EntryX Refsource VUPEN
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1798VDB EntrySignatureX Refsource OVAL
secunia.com/advisories/21815Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/21993Third Party AdvisoryX Refsource SECUNIA

Show all 15 references

support.avaya.com/elmodocs2/security/ASA-2006-195.htmX Refsource CONFIRM
securityreason.com/securityalert/1545Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/21845Third Party AdvisoryX Refsource SECUNIA
www.risesecurity.org/advisory/RISE-2006001.txtX Refsource MISCVendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/28820VDB EntryX Refsource XF

Related vulnerabilities

CVE-2003-0834scoopen_unix+11.37%22y ago06-11-2003 05:00Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help feature, (2) DTSEARCHPATH, or (3) LOGNAME.CVE-2003-0658calderaopenlinux_server+32.10%23y ago03-09-2003 04:00Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.CVE-2003-0937scoopen_unix+10.37%22y ago18-11-2003 05:00SCO UnixWare 7.1.1, 7.1.3, and Open UNIX 8.0.0 allows local users to bypass protections for the "as" address space file for a process ID (PID) by obtaining a procfs file descriptor for the file and calling execve() on a setuid or setgid program, which leaves the descriptor open to the user.CVE-2003-0161compaqtru64+938.79%23y ago01-04-2003 05:00The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control value, allowing attackers to cause a denial of service and possibly execute arbitrary code via a buffer overflow attack using messages, a different vulnerability than CVE-2002-1337.CVE-2003-0914compaqtru64+103.78%22y ago02-12-2003 05:00ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.CVE-2001-1503sunsolaris+10.76%21y ago21-06-2005 04:00The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.

All vulnerabilities inunixware solaris

CVE-2006-4655: sco unixware

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References