Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Sco Subscribe
Total 129 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0215 1 Sco 1 Unixware 2008-09-10 7.2 HIGH N/A
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
CVE-2000-0154 1 Sco 1 Unixware 2008-09-10 1.2 LOW N/A
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.
CVE-2000-0158 1 Sco 1 Openserver 2008-09-10 7.5 HIGH N/A
Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.
CVE-2000-0173 1 Sco 1 Unixware 2008-09-10 5.0 MEDIUM N/A
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
CVE-2000-0224 1 Sco 1 Unixware 2008-09-10 1.2 LOW N/A
ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.
CVE-1999-1450 1 Sco 2 Openserver, Unixware 2008-09-10 7.5 HIGH N/A
Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.
CVE-1999-0825 1 Sco 1 Unixware 2008-09-09 3.6 LOW N/A
The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.
CVE-1999-0836 1 Sco 1 Unixware 2008-09-09 10.0 HIGH N/A
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
CVE-1999-0828 1 Sco 1 Unixware 2008-09-09 3.6 LOW N/A
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
CVE-1999-0697 1 Sco 1 Openserver 2008-09-09 7.2 HIGH N/A
SCO Doctor allows local users to gain root privileges through a Tools option.
CVE-1999-0096 3 Bsdi, Freebsd, Sco 4 Bsd Os, Freebsd, Internet Faststart and 1 more 2008-09-09 5.0 MEDIUM N/A
Sendmail decode alias can be used to overwrite sensitive files.
CVE-1999-0019 7 Data General, Ibm, Ncr and 4 more 10 Dg Ux, Aix, Mp-ras and 7 more 2008-09-09 5.0 MEDIUM N/A
Delete or create a file via rpc.statd, due to invalid information.
CVE-1999-0131 8 Bsdi, Digital, Eric Allman and 5 more 9 Bsd Os, Osf 1, Sendmail and 6 more 2008-09-09 7.2 HIGH N/A
Buffer overflow and denial of service in Sendmail 8.7.5 and earlier through GECOS field gives root access to local users.
CVE-1999-0153 2 Microsoft, Sco 4 Windows 2000, Windows 95, Windows Nt and 1 more 2008-09-09 5.0 MEDIUM N/A
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
CVE-2006-0072 1 Sco 1 Openserver 2008-09-05 7.5 HIGH N/A
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
CVE-2005-0351 1 Sco 1 Openserver 2008-09-05 4.6 MEDIUM N/A
Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.
CVE-2004-1039 1 Sco 2 Openserver, Unixware 2008-09-05 5.0 MEDIUM N/A
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.
CVE-2003-0872 1 Sco 1 Openserver 2008-09-05 2.1 LOW N/A
Certain scripts in OpenServer before 5.0.6 allow local users to overwrite files and conduct other unauthorized activities via a symlink attack on temporary files.
CVE-2002-1998 1 Sco 2 Open Unix, Unixware 2008-09-05 7.5 HIGH N/A
Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long parameter to rtable_create (procedure 21).
CVE-2001-1579 1 Sco 2 Open Unix, Unixware 2008-09-05 5.0 MEDIUM N/A
The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.