high7.5Public exploit code
CVE-2006-0072
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SCO OpenServer 5.0.7 - 'termsh' Local Privilege Escalation2006-01-03 · local · sco · Verified
Impact
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sco | Openserver | Versions 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5 |
References
- NVD record
- CVE.org record
- http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c
- http://www.securityfocus.com/archive/1/420677
- http://www.securityfocus.com/bid/16122
- http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c
- http://www.securityfocus.com/archive/1/420677
- http://www.securityfocus.com/bid/16122