Skip to content
Noroxi

sco records

129 published records for vendor sco.

Researcher profile

Entered KEV
0 · 0%
Weaponized
1 · 0.8%
Pre-auth RCE
6
With a fix record
9.3%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    129 records
    • CVE-2001-0797
      68This week

      Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large numbe

      CriticalCVSS 10.0WeaponizedEPSS 95%

      sgi · irixDec 12, 2001

    • CVE-1999-0368
      52Plan

      Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.

      CriticalCVSS 10.0Proof of conceptEPSS 40%

      proftpd project · proftpdFeb 9, 1999

    • CVE-1999-0009
      49Plan

      Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

      CriticalCVSS 10.0Proof of conceptEPSS 29%

      data general · dg uxApr 8, 1998

    • CVE-1999-0128
      42Plan

      Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.

      MediumCVSS 5.0Proof of conceptEPSS 75%

      digital · osf 1Dec 18, 1996

    • CVE-2000-0026
      41Plan

      Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.

      CriticalCVSS 10.0Proof of conceptEPSS 5%

      windowmaker · wmmonDec 21, 1999

    • CVE-2005-3625
      41Plan

      Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial

      CriticalCVSS 10.0No exploitEPSS 4%

      libextractor · libextractorDec 31, 2005

    • CVE-2000-0306
      41Plan

      Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.

      CriticalCVSS 10.0Proof of conceptEPSS 4%

      sco · openserverMar 12, 2001

    • CVE-1999-0836
      41Plan

      UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

      CriticalCVSS 10.0Proof of conceptEPSS 3%

      sco · unixwareDec 2, 1998

    • CVE-2000-0308
      41Plan

      Insecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 all

      CriticalCVSS 10.0No exploitEPSS 2%

      netscape · enterprise serverMar 12, 2001

    • CVE-2003-0791
      40Plan

      The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string

      CriticalCVSS 9.8No exploitEPSS 2%

      mozilla · mozillaOct 7, 2003

    • CVE-1999-0798
      40Plan

      Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.

      CriticalCVSS 10.0No exploitEPSS 2%

      freebsd · freebsdDec 4, 1998

    • CVE-1999-1138
      40Plan

      SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the

      CriticalCVSS 10.0No exploitEPSS 2%

      sco · open desktopSep 17, 1993

    • CVE-2000-0348
      40Plan

      A vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain roo

      CriticalCVSS 10.0No exploitEPSS 2%

      sco · unixwareMar 12, 2001

    • CVE-1999-0835
      40Plan

      Denial of service in BIND named via malformed SIG records.

      CriticalCVSS 10.0No exploitEPSS 1%

      ibm · aixNov 10, 1999

    • CVE-2000-0003
      40Plan

      Buffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.

      CriticalCVSS 10.0No exploitEPSS 1%

      sco · unixwareDec 30, 1999

    • CVE-2000-1014
      33Monitor

      Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitra

      HighCVSS 7.5Proof of conceptEPSS 12%

      sco · unixwareDec 11, 2000

    • CVE-2004-0079
      33Monitor

      The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (

      HighCVSS 7.5No exploitEPSS 10%

      openssl · opensslNov 23, 2004

    • CVE-2004-1082
      32Monitor

      mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remot

      HighCVSS 7.5No exploitEPSS 8%

      apache · http serverFeb 3, 2004

    • CVE-2004-1307
      32Monitor

      Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code vi

      HighCVSS 7.5No exploitEPSS 6%

      libtiff · libtiffDec 21, 2004

    • CVE-2006-0072
      31Monitor

      Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument.

      HighCVSS 7.5Proof of conceptEPSS 5%

      sco · openserverJan 3, 2006

    • CVE-2004-0390
      31Monitor

      SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attac

      HighCVSS 7.5Proof of conceptEPSS 3%

      sco · openserverDec 31, 2004

    • CVE-2002-1998
      31Monitor

      Buffer overflow in rpc.cmsd in SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows remote attackers to execute arbitrary commands via a long param

      HighCVSS 7.5No exploitEPSS 3%

      sco · open unixDec 31, 2002

    • CVE-2001-0579
      31Monitor

      lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first argument

      HighCVSS 7.5Proof of conceptEPSS 2%

      sco · openserverAug 22, 2001

    • CVE-1999-0017
      31Monitor

      FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

      HighCVSS 7.5No exploitEPSS 2%

      gnu · inetDec 10, 1997

    • CVE-2000-0158
      31Monitor

      Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemon.

      HighCVSS 7.5No exploitEPSS 2%

      sco · openserverFeb 16, 2000