The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert comm…
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this …
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to g…
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to ru…
Unknown vulnerability in display of Merge before 5.3.23a in UnixWare 7.1.x allows local users to gain root privileges.
Format string vulnerability in crontab for SCO OpenServer 5.0.5 and 5.0.6 allows local users to gain privileges via format string specifiers in the f…
Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.
The search97cgi/vtopic" in the UnixWare 7 scohelphttp webserver allows remote attackers to read arbitrary files via a .. (dot dot) attack.
The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init befo…
Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.
Buffer overflow in SCO scohelp program allows remote attackers to execute commands.
Buffer overflow in UnixWare ppptalk command allows local users to gain privileges via a long prompt argument.
Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.
Buffer overflow in UnixWare xauto program allows local users to gain root privilege.
Buffer overflow in SCO su program allows local users to gain root access via a long username.
Buffer overflow in SCO UnixWare Xsco command via a long argument.
UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.
SCO Doctor allows local users to gain root privileges through a Tools option.
Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink a…
A weak encryption algorithm is used for passwords in SCO TermVision, allowing them to be easily decrypted by a local user.
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user…