CVE-2004-1131
https://notcve.org/view.php?id=CVE-2004-1131
Multiple buffer overflows in the enable command for SCO OpenServer 5.0.6 and 5.0.7 allow local users to execute arbitrary code via long command line arguments. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.13/SCOSA-2005.13.txt http://www.securityfocus.com/bid/12474 https://exchange.xforce.ibmcloud.com/vulnerabilities/19243 •
CVE-2003-1021
https://notcve.org/view.php?id=CVE-2003-1021
The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline. • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.5/SCOSA-2005.5.txt http://secunia.com/advisories/14012 http://www.kb.cert.org/vuls/id/972598 http://www.securityfocus.com/bid/12372 https://exchange.xforce.ibmcloud.com/vulnerabilities/19479 •
CVE-2004-1039
https://notcve.org/view.php?id=CVE-2004-1039
The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request. • ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.1/SCOSA-2005.1.txt http://secunia.com/advisories/13805 http://www.securityfocus.com/archive/1/386814 http://www.securityfocus.com/bid/12225 •
CVE-2004-0390 – SCO OpenServer 5.0.x - StartX Weak XHost Permissions
https://notcve.org/view.php?id=CVE-2004-0390
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods. • https://www.exploit-db.com/exploits/20851 http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html http://www.securityfocus.com/advisories/6684 https://exchange.xforce.ibmcloud.com/vulnerabilities/16113 •
CVE-2004-0511 – SCO Multi-channel Memorandum Distribution Facility - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2004-0511
Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference. Múltiples vulnerabilidades desconocidas en MMDF sobre OpenServer 5.0.6 y 5.0.7, y posiblemente otros sistemas operativos, pueden permitir a atacantes causar una denegación de servicio disparando una desreferencia nula. • https://www.exploit-db.com/exploits/24293 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2004.7/SCOSA-2004.7.txt http://www.securityfocus.com/bid/10758 https://exchange.xforce.ibmcloud.com/vulnerabilities/16739 •