Unixware

Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.

Published: 2009-03-30T20:00:00.000Z
Updated: 2024-08-07T11:34:47.076Z

Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying the RELIANT_PATH environment variable to point to a malicious bin/hvenv program.

Published: 2009-03-30T20:00:00.000Z
Updated: 2024-08-07T11:34:47.061Z

Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileges via unknown vectors.

Published: 2008-03-17T16:00:00.000Z
Updated: 2024-08-07T08:17:34.527Z

Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.

Published: 2008-04-07T17:00:00.000Z
Updated: 2024-08-07T07:39:34.978Z

Buffer overflow in uidadmin in SCO Unixware 7.1.3 and 7.1.4 allows local users to execute arbitrary code via a -S (scheme) argument that specifies a large file, a different vulnerability than CVE-2001-1063.

Published: 2005-12-14T11:00:00.000Z
Updated: 2024-08-07T23:31:47.862Z

Unspecified vulnerability in ptrace in SCO UnixWare 7.1.3 and 7.1.4 allows local users to gain privileges via unspecified vectors.

Published: 2006-02-24T01:00:00.000Z
Updated: 2024-08-07T22:53:29.528Z

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.

Published: 2005-10-25T04:00:00.000Z
Updated: 2024-08-07T22:53:29.778Z

The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.

Published: 2005-05-18T04:00:00.000Z
Updated: 2024-08-07T21:05:23.986Z

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.

Published: 2005-03-08T05:00:00.000Z
Updated: 2024-08-07T20:57:41.235Z

Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow.

Published: 2005-05-04T04:00:00.000Z
Updated: 2024-08-08T00:46:12.284Z

Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.

Published: 2005-01-29T05:00:00.000Z
Updated: 2024-08-08T00:39:00.939Z

The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.

Published: 2005-01-19T05:00:00.000Z
Updated: 2024-08-08T00:39:00.543Z

main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

Published: 2004-12-01T05:00:00.000Z
Updated: 2024-08-08T00:39:00.654Z