CVE-2005-2927 Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt c...

HighCVSS 7.2 EPSS 0.46%

Published: 2005-10-25 07:00
Updated: 2026-06-17 01:15
Exploit status: No public exploit known

Description

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.

Affected products

Product	Affected versions	Fixed in
sco unixware	= 7.1.3	No fix listed
sco unixware	= 7.1.4	No fix listed

References

17275 third-party-advisory
101 third-party-advisory
1015098 vdb-entry
20051024 SCO Unixware Setuid ppp prompt Buffer Overflow Vulnerability third-party-advisory
20155 vdb-entry
15159 vdb-entry

CVSS v2.0

7.2 High

AV:L/AC:L/Au:N/C:C/I:C/A:C

Access Vector: Local
Access Complexity: Low
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.46% (percentile 40.5)
CWE: Not classified

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.