PT-2002-1380 · Sco · Unixware+1

Publicado 2002-05-03 · Atualizado 2008-09-11 · CVE-2002-0311

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UnixWare version 7.1.1 Open UNIX version 8.0.0

Description The issue allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for either scoadminreg.cgi or service action.cgi.

Recommendations For UnixWare version 7.1.1, avoid using the -c argument in scoadminreg.cgi and service action.cgi until a fix is available. For Open UNIX version 8.0.0, restrict access to scoadminreg.cgi and service action.cgi to prevent potential exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-0311

Produtos afetados

Open Unix

Unixware

Referências · 6

• 🔥 http://online.securityfocus.com/archive/1/251747 · Exploit
• 🔥 https://exploit-db.com/exploits/21239 · Exploit
• http://securityfocus.com/bid/3936 · Nota
• ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.6/CSSA-2002-SCO.6.txt · Aviso do Fabricante
• http://iss.net/security_center/static/7977.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0311 · Nota de Segurança