PT-2005-1114 · Sco · Openserver

Christer Oberg + 1 · Publicado 2005-01-26 · Atualizado 2017-07-11 · CVE-2003-1021

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenServer versions 5.0.6 through 5.0.7

Description The issue allows local users to gain privileges through crafted strings on the command line in the scosession program.

Recommendations For OpenServer versions 5.0.6 and 5.0.7, at the moment, there is no information about a newer version that contains a fix for this issue.

Correção

Identificadores relacionados

CVE-2003-1021

Produtos afetados

Openserver

Referências · 6

• http://secunia.com/advisories/14012 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1021 · Nota de Segurança
• http://securityfocus.com/bid/12372 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/972598 · Correção
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.5/SCOSA-2005.5.txt · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19479 · Nota