The scosession program in OpenServer 5.0.6 and 5.0.7 allows local users to gain privileges via crafted strings on the commandline.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openserver | Sco | 5.0 (including) | 5.0 (including) |
| Openserver | Sco | 5.0.1 (including) | 5.0.1 (including) |
| Openserver | Sco | 5.0.2 (including) | 5.0.2 (including) |
| Openserver | Sco | 5.0.3 (including) | 5.0.3 (including) |
| Openserver | Sco | 5.0.4 (including) | 5.0.4 (including) |
| Openserver | Sco | 5.0.5 (including) | 5.0.5 (including) |
| Openserver | Sco | 5.0.6 (including) | 5.0.6 (including) |
| Openserver | Sco | 5.0.6a (including) | 5.0.6a (including) |
| Openserver | Sco | 5.0.7 (including) | 5.0.7 (including) |