Browse CVEs

HIGH 10.0 CVE-2014-2935 costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a me… Caldera Mitigation only Fix from $1,9502014-05-08 HIGH 7.5 CVE-2014-2934 Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2… Caldera No fix yet Fix from $1,9502014-05-08 HIGH 7.5 CVE-2014-2936 The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder… Caldera No fix yet Fix from $1,9502014-05-08 MEDIUM 5.0 CVE-2014-2933 Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname. Caldera Mitigation only Fix from $1,6002014-05-08 MEDIUM 5.0 CVE-2003-0658 Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attac… Openlinux Server Mitigation only Fix from $1,6002003-10-20 MEDIUM 5.0 CVE-2002-1199 The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory tr… Openlinux Mitigation only Fix from $1,6002002-10-28 HIGH 7.5 CVE-2002-0884 Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, all… Unixware Patch available Fix from $1,9502002-10-04 HIGH 7.5 CVE-2002-0885 Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow r… Unixware Mitigation only Fix from $1,9502002-10-04 HIGH 7.2 CVE-2002-0911 Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain p… Volution Manager Patch available Fix from $1,9502002-10-04 HIGH 10.0 CVE-2002-0988 Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities. Unixware Mitigation only Fix from $1,9502002-09-24 HIGH 7.2 CVE-2002-0981 Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line. Unixware Patch available Fix from $1,9502002-09-24 HIGH 7.2 CVE-2002-0987 X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow … Unixware Mitigation only Fix from $1,9502002-09-24 HIGH 10.0 CVE-2002-0679EPSS 23% Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code … Unixware Patch available Fix from $1,9502002-09-05 HIGH 7.2 CVE-2002-0517 Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain … Unixware Patch available Fix from $1,9502002-08-12 HIGH 7.2 CVE-2002-0827 Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulner… Unixware Patch available Fix from $1,9502002-08-12 HIGH 7.2 CVE-2002-0442 Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges. Openserver Patch available Fix from $1,9502002-07-26 HIGH 7.5 CVE-2002-0677EPSS 7% CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, … Unixware Patch available Fix from $1,9502002-07-23 HIGH 7.2 CVE-2002-0678EPSS 9% CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by th… Unixware Patch available Fix from $1,9502002-07-23 HIGH 10.0 CVE-2002-0311 Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharac… Unixware Patch available Fix from $1,9502002-05-31 HIGH 7.2 CVE-2002-0246 Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESS… Unixware Patch available Fix from $1,9502002-05-29 HIGH 7.2 CVE-1999-1570 Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter. Openserver Patch available Fix from $1,9502002-05-01 HIGH 7.2 CVE-2002-0105 CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xe… Unixware Mitigation only Fix from $1,9502002-03-25 HIGH 7.5 CVE-2001-1577 Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused. Unixware Patch available Fix from $1,9502001-12-31 HIGH 7.2 CVE-2001-1478 Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code. Unixware Patch available Fix from $1,9502001-12-31 HIGH 10.0 CVE-2001-0850 A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local … Openlinux Patch available Fix from $1,9502001-12-06 HIGH 7.5 CVE-2000-1195 telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is runn… Openlinux Edesktop Patch available Fix from $1,9502001-08-31 HIGH 7.2 CVE-2001-1062 Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code. Openserver after 5.0.6a Fix from $1,9502001-08-31 HIGH 7.2 CVE-2001-1063 Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line … Unixware Patch available Fix from $1,9502001-08-31 HIGH 7.2 CVE-2001-1153 lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument. Openunix Patch available Fix from $1,9502001-08-28 HIGH 7.5 CVE-2001-0980 docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to… Openlinux Server Patch available Fix from $1,9502001-07-17