Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openserver | Sco | 5.0 (including) | 5.0 (including) |
| Unix | Sco | 3.2v4 (including) | 3.2v4 (including) |
References
- ftp://ftp.sco.com/SSE/security_bulletins/SB-98.05a
- http://marc.info/?l=bugtraq\u0026m=90686250717719\u0026w=2
- http://www.cert.org/vendor_bulletins/VB-98.10.sco.mscreen
- http://www.securityfocus.com/archive/1/10420
- ftp://ftp.sco.com/SSE/security_bulletins/SB-98.05a
- http://marc.info/?l=bugtraq\u0026m=90686250717719\u0026w=2
- http://www.cert.org/vendor_bulletins/VB-98.10.sco.mscreen
- http://www.securityfocus.com/archive/1/10420