SCO vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2009-1552 Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via uHigh 7.8 · May 6, 2009
• CVE-2008-6559 Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains ..High 7.2 · Mar 30, 2009
• CVE-2008-6558 Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying High 7.2 · Mar 30, 2009
• CVE-2006-0072 Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument.High 7.5 · Jan 3, 2006
• CVE-2005-2934 Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.High 7.2 · Dec 31, 2005
• CVE-2005-2927 Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argumHigh 7.2 · Oct 25, 2005
• CVE-2004-1131 Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments.High 7.2 · Feb 7, 2005
• CVE-2004-0390 SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthoHigh 7.5 · Dec 31, 2004
• CVE-2004-0510 Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstHigh 7.2 · Dec 23, 2004
• CVE-2003-0834 Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary code via (1) a modified DTHELPUSERSEARCHPATH environment variable and the Help High 7.2 · Dec 1, 2003
• CVE-2003-0742 SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it High 7.2 · Oct 6, 2003
• CVE-2003-0597 Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.High 7.2 · Aug 27, 2003
• CVE-2002-1998 Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_creatHigh 7.5 · Dec 31, 2002
• CVE-2002-0716 Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name arHigh 7.2 · Jul 26, 2002
• CVE-2001-0577 recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argumeHigh 7.2 · Aug 22, 2001
• CVE-2001-0579 lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.High 7.5 · Aug 22, 2001
• CVE-2001-0587 deliver program in MMDF 2.43.3b in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to High 7.2 · Aug 22, 2001
• CVE-2000-0306 Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.High 10 · Mar 12, 2001
• CVE-2000-0348 A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.High 10 · Mar 12, 2001
• CVE-2000-1014 Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via formHigh 7.5 · Dec 11, 2000
• CVE-1999-0979 The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privHigh 7.2 · Apr 11, 2000
• CVE-2000-0158 Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.High 7.5 · Feb 16, 2000
• CVE-2000-0215 Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.High 7.2 · Feb 8, 2000
• CVE-2000-0130 Buffer overflow in SCO scohelp program allows remote attackers to execute commands.High 7.2 · Jan 27, 2000
• CVE-2000-0099 Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.High 7.2 · Jan 18, 2000