low3.6Public exploit code
CVE-1999-0828
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SCO Unixware 7.1 pkginstall - Local Buffer Overflow1999-12-06 · local · sco · Verified
- SCO Unixware 7.1 pkgcat - Local Buffer Overflow1999-12-06 · local · sco · Verified
- SCO Unixware 7.1 - 'pkg' Local Privilege Escalation1999-12-03 · local · sco · Verified
Impact
UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sco | Unixware | Versions 7.0, 7.1 |