Approved changes feed: RSS · Atom

cpe:2.3:o:sco:openserver:5.0.5:*:*:*:*:*:*:*

part: o version: 5.0.5 update: *

VendorSco (8a7b4ff4-f0ef-5eb2-a676-8694bf3a5407)
ProductOpenserver (c0d07576-c403-5ab0-85f1-50d7038f9946)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0072 vulnerable 2026-06-08 04:48:45.886496 Details available
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
Published: 2006-01-04T00:00:00.000Z
Updated: 2024-08-07T16:18:20.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0390 vulnerable 2026-06-08 04:47:49.667174 Details available
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
Published: 2005-04-14T04:00:00.000Z
Updated: 2024-08-08T00:17:14.508Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1021 not_vulnerable 2026-06-08 04:47:23.185111 Details available
The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.
Published: 2005-02-06T05:00:00.000Z
Updated: 2024-08-08T02:12:35.485Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0872 vulnerable 2026-06-08 04:47:22.776386 Details available
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
Published: 2003-10-25T04:00:00.000Z
Updated: 2024-08-08T02:05:12.642Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-0742 vulnerable 2026-06-08 04:47:22.368508 Details available
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
Published: 2003-09-19T04:00:00.000Z
Updated: 2024-08-08T02:05:12.358Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1199 vulnerable 2026-06-08 04:46:23.157778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0716 vulnerable 2026-06-08 04:46:22.082872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1508 vulnerable 2026-06-08 04:46:20.192392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0896 vulnerable 2026-06-08 04:45:20.997346 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0797 vulnerable 2026-06-08 04:45:20.824683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0627 vulnerable 2026-06-08 04:45:20.588847 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0158 vulnerable 2026-06-08 04:44:58.406336 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0147 vulnerable 2026-06-08 04:44:58.403030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-1571 vulnerable 2026-06-08 04:44:58.345855 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0697 vulnerable 2026-06-08 04:44:58.090908 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-1999-0368 vulnerable 2026-06-08 04:44:58.015812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.