SCO UNIX calserver Remote Buffer Overflow Vulnerability

Bugtraq ID:	2353
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	Yes
Published:	Jan 29 1999 12:00AM
Updated:	Jan 29 1999 12:00AM
Credit:	Reported to bugtraq by
Vulnerable:	SCO Open Server 5.0.4 SCO Open Server 5.0.3 SCO Open Server 5.0.2 SCO Open Server 5.0 SCO Internet FastStart 1.1 SCO Internet FastStart 1.0
Not Vulnerable:

SCO UNIX calserver Remote Buffer Overflow Vulnerability

Versions of SCO Unix calserver are vulnerable to a buffer overflow attack which can permit root access to a remote attacker.

SCO UNIX calserver Remote Buffer Overflow Vulnerability

This exploit was supplied by leshka <[email protected]> on Tue, Dec 29, 1998.

• /data/vulnerabilities/exploits/sco-cal-x.c

SCO UNIX calserver Remote Buffer Overflow Vulnerability

Solution:
You can download the SSE package as follows:

Anonymous ftp (World Wide Web URL):

ftp://ftp.sco.COM/SSE/sse019.ltr
(cover letter, ASCII text)

ftp://ftp.sco.COM/SSE/sse019.tar.Z
(new binaries, compressed tar file)


SCO Internet FastStart 1.0

• SCO sse019.tar.Z
  ftp://ftp.sco.COM/SSE/sse019.tar.Z

SCO Internet FastStart 1.1

• SCO sse019.tar.Z
  ftp://ftp.sco.COM/SSE/sse019.tar.Z

SCO Open Server 5.0

• SCO sse019.tar.Z
  ftp://ftp.sco.COM/SSE/sse019.tar.Z

SCO Open Server 5.0.2

• SCO sse019.tar.Z
  ftp://ftp.sco.COM/SSE/sse019.tar.Z

SCO Open Server 5.0.3

• SCO sse019.tar.Z
  ftp://ftp.sco.COM/SSE/sse019.tar.Z

SCO Open Server 5.0.4

• SCO sse019.tar.Z
  ftp://ftp.sco.COM/SSE/sse019.tar.Z

SCO UNIX calserver Remote Buffer Overflow Vulnerability

References: