Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openserver | Sco | 5.0 (including) | 5.0 (including) |
| Openserver | Sco | 5.0.1 (including) | 5.0.1 (including) |
| Openserver | Sco | 5.0.2 (including) | 5.0.2 (including) |
| Openserver | Sco | 5.0.3 (including) | 5.0.3 (including) |
| Openserver | Sco | 5.0.4 (including) | 5.0.4 (including) |
| Openserver | Sco | 5.0.5 (including) | 5.0.5 (including) |
| Openserver | Sco | 5.0.6 (including) | 5.0.6 (including) |
| Openserver | Sco | 5.0.6a (including) | 5.0.6a (including) |
| Openserver | Sco | 5.0.7 (including) | 5.0.7 (including) |
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c
- http://www.securityfocus.com/archive/1/420677
- http://www.securityfocus.com/bid/16122
- http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c
- http://www.securityfocus.com/archive/1/420677
- http://www.securityfocus.com/bid/16122