CVE-1999-0411

3 documents3 sources
Severity
7.2HIGH
EPSS
0.1%
top 76.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SCO Openserver
Timeline
PublishedMar 7
Latest updateApr 30

Description

Several startup scripts in SCO OpenServer Enterprise System v 5.0.4p, including S84rpcinit, S95nis, S85tcp, and S89nfs, are vulnerable to a symlink attack, allowing a local user to gain root access.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages1 packages

▶NVDsco/openserver3.0, 5+1

🔴Vulnerability Details

2
GHSA
GHSA-w5mv-gqvq-qwgr: Several startup scripts in SCO OpenServer Enterprise System v 5↗2022-04-30
▶
CVEList
CVE-1999-0411: Several startup scripts in SCO OpenServer Enterprise System v 5↗2000-02-04
▶
CVE-1999-0411 (HIGH CVSS 7.2) | Several startup scripts in SCO Open | cvebase.io