caldera openserver vulnerabilities

Latest caldera openserver CVEs

Newest publication first

1. CVE-2003-0658 Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via....

   Published 2003-09-03

   Medium·CVSS 5.0 EPSS 2.1%

   Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary publicly readable files via a certain URL, possibly related to rewrite rules.

2. CVE-2002-0887 scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.

   Published 2003-04-02

   Low·CVSS 2.1 EPSS 0.69% Public exploit

   scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files.

3. CVE-2002-0442 Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.

   Published 2003-04-02

   High·CVSS 7.2 EPSS 0.41%

   Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.

4. CVE-1999-1570 Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

   Published 2002-08-31

   High·CVSS 7.2 EPSS 0.41%

   Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter.

5. CVE-2001-1062 Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.

   Published 2002-06-25

   High·CVSS 7.2 EPSS 0.43%

   Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.