PT-2001-1108 · Sco · Sco Unixware

Publicado 2001-03-12 · Atualizado 2011-03-08 · CVE-2000-0351

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SCO UnixWare version 7.1.0

Description The issue concerns some packaging commands in SCO UnixWare that have insecure privileges. This allows local users to add or remove software packages, which could lead to unauthorized modifications of the system.

Recommendations For SCO UnixWare version 7.1.0, consider restricting access to the packaging commands until a fix is available to prevent local users from exploiting the insecure privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2000-0351

Produtos afetados

Sco Unixware

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2000-0351 · Nota de Segurança
• ftp://ftp.sco.com/SSE/security_bulletins/SB-99.09b · Aviso do Fabricante