PT-2002-1380 · Sco · Unixware+1

Published 2002-05-03 · Updated 2008-09-11 · CVE-2002-0311

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions UnixWare version 7.1.1 Open UNIX version 8.0.0

Description The issue allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for either scoadminreg.cgi or service action.cgi.

Recommendations For UnixWare version 7.1.1, avoid using the -c argument in scoadminreg.cgi and service action.cgi until a fix is available. For Open UNIX version 8.0.0, restrict access to scoadminreg.cgi and service action.cgi to prevent potential exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-0311

Affected Products

Open Unix

Unixware

References · 6

• 🔥 http://online.securityfocus.com/archive/1/251747 · Exploit
• 🔥 https://exploit-db.com/exploits/21239 · Exploit
• ftp://stage.caldera.com/pub/security/openunix/CSSA-2002-SCO.6/CSSA-2002-SCO.6.txt · Vendor Advisory
• http://iss.net/security_center/static/7977.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0311 · Security Note
• http://securityfocus.com/bid/3936 · Note