Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2008-1343

CWE-22 — Path Traversal4 documents4 sources
Severity
4.9MEDIUM
EPSS
0.2%
top 56.80%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
SCO Unixware
Timeline
PublishedMar 17
Latest updateMay 3

Description

Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7.1.4 allows local users to gain privileges via unknown vectors.

CVSS vector

AV:L/AC:L/C:N/I:C/A:NExploitability: 3.9 | Impact: 6.9

Affected Packages1 packages

▶NVDsco/unixware7.1.4

Patches

Patch: ftp.sco.com ↗Patch: ftp.sco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-ghhg-c6wq-2hr9: Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7↗2022-05-03
▶
CVEList
CVE-2008-1343: Directory traversal vulnerability in (1) pkgadd and (2) pkgrm in SCO UnixWare 7↗2008-03-17
▶

💥Exploits & PoCs

1
Exploit-DB
SCO UnixWare < 7.1.4 p534589 - 'pkgadd' Local Privilege Escalation↗2008-04-04
▶
CVE-2008-1343 (MEDIUM CVSS 4.9) | Directory traversal vulnerability i | cvebase.io