PT-2005-1429 · Sco · Sco Openserver

Publicado 2005-04-07 · Atualizado 2008-09-05 · CVE-2005-0351

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SCO OpenServer versions 5.0.6 through 5.0.7

Description A buffer overflow issue exists in certain components of SCO OpenServer, potentially allowing local users to execute arbitrary code by manipulating the HOME environment variable.

Recommendations For SCO OpenServer versions 5.0.6 and 5.0.7, consider restricting the length of the HOME environment variable to prevent exploitation until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2005-0351

Produtos afetados

Sco Openserver

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-0351 · Nota de Segurança
• http://securityfocus.com/bid/13062 · Nota
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt · Aviso do Fabricante