PT-2005-1429 · Sco · Sco Openserver

Published 2005-04-07 · Updated 2008-09-05 · CVE-2005-0351

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SCO OpenServer versions 5.0.6 through 5.0.7

Description A buffer overflow issue exists in certain components of SCO OpenServer, potentially allowing local users to execute arbitrary code by manipulating the HOME environment variable.

Recommendations For SCO OpenServer versions 5.0.6 and 5.0.7, consider restricting the length of the HOME environment variable to prevent exploitation until a patch is available.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2005-0351

Affected Products

Sco Openserver

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-0351 · Security Note
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.15/SCOSA-2005.15.txt · Vendor Advisory
• http://securityfocus.com/bid/13062 · Note