Sco Unixware vulnerabilities

CVE-1999-0988 [HIGH] CVE-1999-0988: UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack. UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.

CVE-1999-0864 [HIGH] CVE-1999-0864: UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./co UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.

CVE-1999-0866 [HIGH] CVE-1999-0866: Buffer overflow in UnixWare xauto program allows local users to gain root privilege. Buffer overflow in UnixWare xauto program allows local users to gain root privilege.

CVE-1999-0825 [LOW] CVE-1999-0825: The default permissions for UnixWare /var/mail allow local users to read and modify other users' mai The default permissions for UnixWare /var/mail allow local users to read and modify other users' mail.

CVE-1999-0828 [LOW] CVE-1999-0828: UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary file UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

CVE-1999-0845 [HIGH] CVE-1999-0845: Buffer overflow in SCO su program allows local users to gain root access via a long username. Buffer overflow in SCO su program allows local users to gain root access via a long username.

CVE-1999-0835 [CRITICAL] CVE-1999-0835: Denial of service in BIND named via malformed SIG records. Denial of service in BIND named via malformed SIG records.

CVE-1999-0830 [HIGH] CVE-1999-0830: Buffer overflow in SCO UnixWare Xsco command via a long argument. Buffer overflow in SCO UnixWare Xsco command via a long argument.

CVE-1999-0942 [HIGH] CVE-1999-0942: UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmenta UnixWare dos7utils allows a local user to gain root privileges by using the STATICMERGE environmental variable to find a script which it executes.

CVE-1999-0368 [CRITICAL] CVE-1999-0368: Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a. palmetto.

CVE-1999-1450 [HIGH] CVE-1999-1450: Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlier, allows remote attackers to gain privileges.

CVE-1999-0798 [CRITICAL] CVE-1999-0798: Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type. Buffer overflow in bootpd on OpenBSD, FreeBSD, and Linux systems via a malformed header type.

CVE-1999-0836 [CRITICAL] CVE-1999-0836: UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack. UnixWare uidadmin allows local users to modify arbitrary files via a symlink attack.

CVE-1999-0009 [CRITICAL] CVE-1999-0009: Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.

CVE-1999-0011 [MEDIUM] CWE-1067 CVE-1999-0011: Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.

CVE-1999-0010 [MEDIUM] CVE-1999-0010: Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.

CVE-1999-0004 [MEDIUM] CVE-1999-0004: MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook. MIME buffer overflow in email clients, e.g. Solaris mailtool and Outlook.

CVE-1999-0017 [HIGH] CVE-1999-0017: FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP clien FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.

CVE-1999-0024 [MEDIUM] CVE-1999-0024: DNS cache poisoning via BIND, by predictable query IDs. DNS cache poisoning via BIND, by predictable query IDs.

CVE-1999-0033 [HIGH] CVE-1999-0033: Command execution in Sun systems via buffer overflow in the at program. Command execution in Sun systems via buffer overflow in the at program.