SCO UnixWare contains a flaw that may allow an attacker to gain access to unauthorized privileges. The issue is triggered when an error occurs in the termsetup variable handling. This may allow a local attacker to gain escalated root privileges.
Classification
Location:
Local Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Discontinued Product
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
Solution
The vendor has discontinued this product and therefore has no patch or upgrade that mitigates this problem. It is recommended that an alternate software package be used in its place.
