PT-2002-1993 · Sco+1 · Xsco+3

Published 2002-09-24 · Updated 2008-09-10 · CVE-2002-0987

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: OpenUNIX version 8.0.0 UnixWare version 7.1.1

Description: The issue concerns the X server (Xsco) in the specified operating systems, which fails to drop privileges before executing certain programs, such as xkbcomp, using the popen function. This could potentially allow local users to gain elevated privileges.

Recommendations: For OpenUNIX version 8.0.0, consider restricting access to the xkbcomp program until a proper fix is applied. For UnixWare version 7.1.1, restrict the use of the popen function in the X server (Xsco) to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-0987

Affected Products

Open Unix

Unixware

Xsco

Xkbcomp

References · 6

• 🔥 https://exploit-db.com/exploits/21758 · Exploit
• ftp://ftp.sco.com/pub/updates/OpenUNIX/CSSA-2002-SCO.38 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0987 · Security Note
• http://iss.net/security_center/static/9976.php · Note
• http://osvdb.org/5044 · Note
• http://securityfocus.com/bid/5575 · Note