VYPR

by SCO Group

CVEs (71)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2003-0791Cri0.649.80.01Oct 7, 2003The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw JavaScript function, which is then deserialized and executed.
CVE-2004-0079Hig0.497.50.02Nov 23, 2004The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
CVE-2005-0109Med0.365.60.00Mar 5, 2005Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses.
CVE-1999-0011Med0.365.40.11Apr 8, 1998Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
CVE-2001-07970.100.89Dec 12, 2001Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
CVE-1999-03680.070.48Feb 9, 1999Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.
CVE-1999-01530.050.19Jul 1, 1997Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
CVE-2000-03060.040.08Mar 12, 2001Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.
CVE-1999-01280.040.16Dec 18, 1996Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
CVE-2006-00720.030.05Jan 4, 2006Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
CVE-2005-09930.030.00May 2, 2005Buffer overflow in nwprint in SCO OpenServer 5.0.7 allows local users to execute arbitrary code via a long command line argument.
CVE-2004-03900.030.03Dec 31, 2004SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
CVE-2004-05100.030.01Dec 23, 2004Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.
CVE-2004-05110.030.02Dec 23, 2004Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.
CVE-2001-05760.030.01Aug 22, 2001lpusers as included with SCO OpenServer 5.0 through 5.0.6 allows a local attacker to gain additional privileges via a buffer overflow attack in the '-u' command line parameter.
CVE-2001-05770.030.01Aug 22, 2001recon in SCO OpenServer 5.0 through 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first command line argument.
CVE-2001-05780.030.01Aug 22, 2001Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.
CVE-2001-05790.030.03Aug 22, 2001lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument to the command.
CVE-2001-05750.030.01Aug 22, 2001Buffer overflow in lpshut in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a long first argument to lpshut.
CVE-1999-08930.030.00Oct 11, 1999userOsa in SCO OpenServer allows local users to corrupt files via a symlink attack.