The timed program (in.timed) in UnixWare 7 and OpenUnix 8.0.0 does not properly terminate certain strings with a null, which allows remote attackers to cause a denial of service.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Open_unix | Sco | 8.0.0 (including) | 8.0.0 (including) |
| Unixware | Sco | 7 (including) | 7 (including) |