PT-1998-1135 · Sco · Sco Openserver+1

Publicado 1998-08-27 · Atualizado 2016-10-18 · CVE-1999-1041

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SCO OpenServer version 5.0 SCO UNIX version 3.2v4

Description A buffer overflow issue in the mscreen component allows a local user to gain root access. This can be achieved through a long TERM environmental variable or a long entry in the .mscreenrc file.

Recommendations For SCO OpenServer version 5.0, restrict access to the mscreen component to minimize the risk of exploitation. For SCO UNIX version 3.2v4, avoid using long entries in the .mscreenrc file and long TERM environmental variables until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-1999-1041

Produtos afetados

Sco Openserver

Sco Unix

Referências · 6

• 🔥 https://exploit-db.com/exploits/261 · Exploit
• http://cert.org/vendor_bulletins/VB-98.10.sco.mscreen · Correção
• http://marc.info/?l=bugtraq&m=90686250717719&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1041 · Nota de Segurança
• ftp://ftp.sco.com/SSE/security_bulletins/SB-98.05a · Nota
• http://securityfocus.com/archive/1/10420 · Aviso do Fabricante