CVE-2005-2926 Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.

MediumCVSS 4.6 EPSS 0.45%

Published: 2005-10-25 07:00
Updated: 2026-06-17 01:15
Exploit status: No public exploit known

Description

Stack-based buffer overflow in (1) backupsh and (2) authsh in SCO Openserver 5.0.7 allows local users to execute arbitrary code via a long HOME environment variable.

Affected products

Product	Affected versions	Fixed in
sco openserver	<= 5.0.7	No fix listed

References

17274 third-party-advisory
1015099 vdb-entry
20051024 SCO Openserver backupsh 'Home' Buffer Overflow Vulnerability third-party-advisory
20153 vdb-entry
20154 vdb-entry
15160 vdb-entry

CVSS v2.0

4.6 Medium

AV:L/AC:L/Au:N/C:P/I:P/A:P

Access Vector: Local
Access Complexity: Low
Authentication: None
Confidentiality: Partial
Integrity: Partial
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.45% (percentile 39.6)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.