Vulnerabilities (CVE)

Filtered by vendor Sco Subscribe
Total 129 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-1209 1 Sco 2 Open Desktop, Openserver 2025-04-03 7.2 HIGH N/A
Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges.
CVE-2004-0079 23 4d, Apple, Avaya and 20 more 66 Webstar, Mac Os X, Mac Os X Server and 63 more 2025-04-03 5.0 MEDIUM 7.5 HIGH
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVE-1999-0835 3 Ibm, Sco, Sun 4 Aix, Openserver, Unixware and 1 more 2025-04-03 10.0 HIGH N/A
Denial of service in BIND named via malformed SIG records.
CVE-2001-0896 1 Sco 1 Openserver 2025-04-03 5.0 MEDIUM N/A
Inetd in OpenServer 5.0.5 allows remote attackers to cause a denial of service (crash) via a port scan, e.g. with nmap -PO.
CVE-2003-0282 2 Info-zip, Sco 3 Unzip, Openlinux Server, Openlinux Workstation 2025-04-03 2.6 LOW N/A
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two . (dot) characters, which are filtered and result in a ".." sequence.
CVE-2005-2926 1 Sco 1 Openserver 2025-04-03 4.6 MEDIUM N/A
Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.
CVE-2000-0003 1 Sco 1 Unixware 2025-04-03 10.0 HIGH N/A
Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.
CVE-1999-0830 1 Sco 1 Unixware 2025-04-03 7.2 HIGH N/A
Buffer overflow in SCO UnixWare Xsco command via a long argument.
CVE-2001-0577 1 Sco 1 Openserver 2025-04-03 7.2 HIGH N/A
recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
CVE-2005-0351 1 Sco 1 Openserver 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in (1) termsh, (2) atcronsh, and (3) auditsh in SCO OpenServer 5.0.6 and 5.0.7 might allow local users to execute arbitrary code via a long HOME environment variable.
CVE-2000-0308 2 Netscape, Sco 4 Enterprise Server, Fasttrack Server, Proxy Server and 1 more 2025-04-03 10.0 HIGH N/A
Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an attacker to gain root privileges.
CVE-2006-4655 2 Sco, Sun 2 Unixware, Solaris 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long _XKB_CHARSET environment variable value.
CVE-2000-0029 1 Sco 1 Unixware 2025-04-03 4.6 MEDIUM N/A
UnixWare pis and mkpis commands allow local users to gain privileges via a symlink attack.
CVE-1999-0836 1 Sco 1 Unixware 2025-04-03 10.0 HIGH N/A
UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.
CVE-1999-0023 6 Bsdi, Freebsd, Ibm and 3 more 10 Bsd Os, Freebsd, Aix and 7 more 2025-04-03 7.2 HIGH N/A
Local user gains root privileges via buffer overflow in rdist, via lookup() function.
CVE-1999-0345 4 Freebsd, Ibm, Sco and 1 more 7 Freebsd, Aix, Sng and 4 more 2025-04-03 5.0 MEDIUM N/A
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
CVE-2003-0742 1 Sco 1 Openserver 2025-04-03 7.2 HIGH N/A
SCO Internet Manager (mana) allows local users to execute arbitrary programs by setting the REMOTE_ADDR environment variable to cause menu.mana to run as if it were called from ncsa_httpd, then modifying the PATH environment variable to point to a malicious "hostname" program.
CVE-2001-0797 5 Hp, Ibm, Sco and 2 more 6 Hp-ux, Aix, Openserver and 3 more 2025-04-03 10.0 HIGH N/A
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
CVE-1999-0010 8 Data General, Ibm, Isc and 5 more 11 Dg Ux, Aix, Bind and 8 more 2025-04-03 5.0 MEDIUM N/A
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
CVE-2000-0026 2 Sco, Windowmaker 2 Unixware, Wmmon 2025-04-03 10.0 HIGH N/A
Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.