Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Sco Subscribe
Total 129 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2002-0716 1 Sco 1 Openserver 2016-10-17 7.2 HIGH N/A
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the file name argument.
CVE-2000-0003 1 Sco 1 Unixware 2016-10-17 10.0 HIGH N/A
Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
CVE-2000-0029 1 Sco 1 Unixware 2016-10-17 4.6 MEDIUM N/A
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
CVE-2000-0026 2 Sco, Windowmaker 2 Unixware, Wmmon 2016-10-17 10.0 HIGH N/A
Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.
CVE-2000-0130 1 Sco 1 Unixware 2016-10-17 7.2 HIGH N/A
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
CVE-1999-1571 1 Sco 1 Openserver 2016-10-17 7.2 HIGH N/A
Buffer overflow in sar for SCO OpenServer 5.0.0 through 5.0.5 may allow local users to gain root privileges via a long -f parameter, a different vulnerability than CVE-1999-1570.
CVE-2000-0099 1 Sco 1 Unixware 2016-10-17 7.2 HIGH N/A
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
CVE-1999-1041 1 Sco 2 Openserver, Unix 2016-10-17 7.2 HIGH N/A
Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
CVE-1999-0979 1 Sco 1 Unixware 2016-10-17 7.2 HIGH N/A
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.
CVE-1999-0864 1 Sco 1 Unixware 2016-10-17 7.2 HIGH N/A
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
CVE-1999-0866 1 Sco 1 Unixware 2016-10-17 7.2 HIGH N/A
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
CVE-1999-0798 5 Bsdi, Freebsd, Openbsd and 2 more 7 Bsd Os, Freebsd, Openbsd and 4 more 2016-10-17 10.0 HIGH N/A
Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.
CVE-2005-0134 1 Sco 1 Unixware 2011-03-07 4.6 MEDIUM N/A
The X server in SCO UnixWare 7.1.1, 7.1.3, and 7.1.4 does not properly create socket directories in /tmp, which could allow attackers to hijack local sockets.
CVE-2000-0351 1 Sco 1 Unixware 2011-03-07 4.6 MEDIUM N/A
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
CVE-1999-1304 1 Sco 5 Open Desktop, Open Desktop Lite, Openserver Enterprise System and 2 more 2011-03-07 7.2 HIGH N/A
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVE-1999-1303 1 Sco 5 Open Desktop, Open Desktop Lite, Openserver Enterprise System and 2 more 2011-03-07 7.2 HIGH N/A
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVE-1999-1305 1 Sco 5 Open Desktop, Open Desktop Lite, Openserver Enterprise System and 2 more 2011-03-07 7.2 HIGH N/A
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVE-2005-2927 1 Sco 1 Unixware 2008-09-10 7.2 HIGH N/A
Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.
CVE-2003-0791 2 Mozilla, Sco 2 Mozilla, Openserver 2008-09-10 7.5 HIGH N/A
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
CVE-2001-0588 1 Sco 1 Openserver 2008-09-10 4.6 MEDIUM N/A
sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.