PT-2001-2289 · Sco · Sco Openserver

Publicado 2001-06-13 · Atualizado 2017-07-11 · CVE-2001-1148

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SCO OpenServer version 5.0.6a and earlier

Description The issue concerns multiple buffer overflows in programs used by scoadmin and sysadmsh. These overflows can be triggered by local users who can gain privileges by setting a long TERM environment variable. The affected programs include atcronsh, auditsh, authsh, backupsh, lpsh, sysadm.menu, and termsh.

Recommendations For SCO OpenServer version 5.0.6a and earlier, consider restricting access to the affected programs until a patch is available. As a temporary workaround, avoid using a long TERM environment variable in the affected programs. At the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2001-1148

Produtos afetados

Sco Openserver

Referências · 4

• http://securityfocus.com/archive/82/191216 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7281 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-1148 · Nota de Segurança
• http://securityfocus.com/archive/1/219966 · Aviso do Fabricante