Vulnerabilities (CVE)

Filtered by vendor Sco Subscribe
Total 129 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0835 3 Ibm, Sco, Sun 4 Aix, Openserver, Unixware and 1 more 2023-12-10 10.0 HIGH N/A
Denial of service in BIND named via malformed SIG records.
CVE-2003-0742 1 Sco 1 Openserver 2023-12-10 7.2 HIGH N/A
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
CVE-2001-1508 1 Sco 1 Openserver 2023-12-10 4.6 MEDIUM N/A
Buffer overflow in lpstat in SCO OpenServer 5.0 through 5.0.6a allows local users to execute arbitrary code as group bin via a long command line argument.
CVE-1999-1303 1 Sco 5 Open Desktop, Open Desktop Lite, Openserver Enterprise System and 2 more 2023-12-10 7.2 HIGH N/A
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVE-1999-0693 3 Hp, Ibm, Sco 3 Hp-ux, Aix, Unixware 2023-12-10 7.2 HIGH N/A
Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges.
CVE-2000-0307 1 Sco 3 Open Desktop, Openserver, Unixware 2023-12-10 5.0 MEDIUM N/A
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below 1024.
CVE-2004-0390 1 Sco 1 Openserver 2023-12-10 7.5 HIGH N/A
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
CVE-1999-0128 5 Digital, Ibm, Linux and 2 more 9 Osf 1, Aix, Sng and 6 more 2023-12-10 5.0 MEDIUM N/A
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
CVE-2000-0348 1 Sco 1 Unixware 2023-12-10 10.0 HIGH N/A
A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privileges.
CVE-1999-1305 1 Sco 5 Open Desktop, Open Desktop Lite, Openserver Enterprise System and 2 more 2023-12-10 7.2 HIGH N/A
Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.
CVE-2000-0099 1 Sco 1 Unixware 2023-12-10 7.2 HIGH N/A
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
CVE-2000-0306 1 Sco 1 Openserver 2023-12-10 10.0 HIGH N/A
Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
CVE-2001-0896 1 Sco 1 Openserver 2023-12-10 5.0 MEDIUM N/A
Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.
CVE-2000-0842 1 Sco 1 Unixware 2023-12-10 5.0 MEDIUM N/A
The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
CVE-2000-1014 1 Sco 1 Unixware 2023-12-10 7.5 HIGH N/A
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
CVE-1999-0345 4 Freebsd, Ibm, Sco and 1 more 7 Freebsd, Aix, Sng and 4 more 2023-12-10 5.0 MEDIUM N/A
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
CVE-2001-0588 1 Sco 1 Openserver 2023-12-10 4.6 MEDIUM N/A
sendmail 8.9.3, as included with the MMDF 2.43.3b package in SCO OpenServer 5.0.6, can allow a local attacker to gain additional privileges via a buffer overflow in the first argument to the command.
CVE-2000-0173 1 Sco 1 Unixware 2023-12-10 5.0 MEDIUM N/A
Vulnerability in the EELS system in SCO UnixWare 7.1.x allows remote attackers to cause a denial of service.
CVE-2000-0351 1 Sco 1 Unixware 2023-12-10 4.6 MEDIUM N/A
Some packaging commands in SCO UnixWare 7.1.0 have insecure privileges, which allows local users to add or remove software packages.
CVE-2000-0154 1 Sco 1 Unixware 2023-12-10 1.2 LOW N/A
The ARCserve agent in UnixWare allows local attackers to modify arbitrary files via a symlink attack.