PT-2002-1993 · Sco+1 · Xsco+3

Publicado 2002-09-24 · Atualizado 2008-09-10 · CVE-2002-0987

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: OpenUNIX version 8.0.0 UnixWare version 7.1.1

Description: The issue concerns the X server (Xsco) in the specified operating systems, which fails to drop privileges before executing certain programs, such as xkbcomp, using the popen function. This could potentially allow local users to gain elevated privileges.

Recommendations: For OpenUNIX version 8.0.0, consider restricting access to the xkbcomp program until a proper fix is applied. For UnixWare version 7.1.1, restrict the use of the popen function in the X server (Xsco) to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-0987

Produtos afetados

Open Unix

Unixware

Xsco

Xkbcomp

Referências · 6

• 🔥 https://exploit-db.com/exploits/21758 · Exploit
• http://iss.net/security_center/static/9976.php · Nota
• http://osvdb.org/5044 · Nota
• http://securityfocus.com/bid/5575 · Nota
• ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0987 · Nota de Segurança