SCO OpenServer Termsh Buffer Overflow Vulnerability

Bugtraq ID:	16122
Class:	Boundary Condition Error
CVE:
Remote:	No
Local:	Yes
Published:	Jan 03 2006 12:00AM
Updated:	Jan 03 2006 12:00AM
Credit:	Discovered by RoD hEDoR.
Vulnerable:	SCO Open Server 5.0.7 SCO Open Server 5.0.6 a SCO Open Server 5.0.6 SCO Open Server 5.0.5 SCO Open Server 5.0.4 SCO Open Server 5.0.3 SCO Open Server 5.0.2 SCO Open Server 5.0.1 SCO Open Server 5.0
Not Vulnerable:

SCO OpenServer Termsh Buffer Overflow Vulnerability

SCO OpenServer termsh application is affected by a local buffer overflow vulnerability.

A successful attack may allow the attacker to gain elevated privileges in the context of the application. It should be noted that the application is installed as setgid auth.

SCO OpenServer 5.0.x are affected by this issue.

SCO OpenServer Termsh Buffer Overflow Vulnerability

Exploit code is available:

• /data/vulnerabilities/exploits/Openserver_bof.c

SCO OpenServer Termsh Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

SCO OpenServer Termsh Buffer Overflow Vulnerability

References:

• SCO OpenServer Home Page (SCO)
  
• SCO Openserver 5.0.x exploit ("rod hedor" )