PT-2002-1493 · Caldera · Caldera Openserver

Published 2002-07-26 · Updated 2008-09-05 · CVE-2002-0442

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Caldera OpenServer versions 5.0.5 through 5.0.6

Description A buffer overflow issue in the dlvr audit component allows local users to gain root privileges.

Recommendations For Caldera OpenServer versions 5.0.5 and 5.0.6, consider restricting access to the dlvr audit component until a patch is available. As a temporary workaround, disabling the dlvr audit functionality may help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-0442

Affected Products

Caldera Openserver

References · 4

• http://iss.net/security_center/static/8442.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0442 · Security Note
• http://securityfocus.com/bid/4273 · Vendor Advisory
• ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.8/CSSA-2002-SCO.8.txt · Vendor Advisory