PT-2001-2568 · Novell+2 · Unixware+2

Published 2001-12-31 · Updated 2017-07-11 · CVE-2001-1478

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions xlock versions 7.1.0 through 7.1.1 in UnixWare and version 8.0.0 in Open Unix

Description A buffer overflow issue in xlock allows local users to execute arbitrary code.

Recommendations For UnixWare versions 7.1.0 and 7.1.1, and Open Unix version 8.0.0, update to a version that contains a fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1478

Affected Products

Open Unix

Unixware

Xlock

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-1478 · Security Note
• http://securityfocus.com/bid/3555 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7573 · Note
• ftp://stage.caldera.com/pub/security/openunix/CSSA-2001-SCO.34/CSSA-2001-SCO.34.txt · Patch, Vendor Advisory