CVE-2002-0887 scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
LowCVSS 2.1
EPSS 0.69%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| caldera openserver | = 5.0.5 | No fix listed |
| caldera openserver | = 5.0.6 | No fix listed |
References
- 20010522 [SRT2001-10] - scoadmin /tmp issues mailing-list
- openserver-scoadmin-symlink(9210) patch vdb-entry vendor-advisory
- 4875 patch vdb-entry vendor-advisory