OSVDB ID: 8336 Title: SCO UnixWare Xsco Command Overflow |
Info |
|
|
Dates |
||||
|
|
Description |
A local overflow exists in SCO UnixWare. UnixWare fails to check the boundary of arguments supplied to the "Xsco" command, resulting in a buffer overflow. By passing an overly long argument (argv[1]) to Xsco, an local attacker can cause a buffer overflow and gain superuser privileges, resulting in a loss of integrity. |
Classification |
Location:
Local Access Required
Attack Type: Input Manipulation Impact: Loss of Integrity Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, SCO has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|
ktwo.ca -