high7.5Public exploit code
CVE-2004-0390
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauth…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SCO OpenServer 5.0.x - StartX Weak XHost Permissions2001-05-07 · local · sco · Verified
Impact
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sco | Openserver | Versions 5.0.5, 5.0.6, 5.0.7 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html
- http://www.securityfocus.com/advisories/6684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16113
- http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0424.html
- http://www.securityfocus.com/advisories/6684
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16113