CVE-2008-0310 Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, pr...
MediumCVSS 6.9
EPSS 1.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sco unixware | = 7.1.4 | No fix listed |
References
- SCOSA-2008.1 vendor-advisory
- 20080403 SCO UnixWare pkgadd Directory Traversal Vulnerability third-party-advisory
- 29657 third-party-advisory vendor-advisory
- www.sco.com patch vendor-advisory
- 1019787 vdb-entry
- sco-unixware-pkgadd-directory-traversal(41759) vdb-entry
- 5355 exploit