CVE-1999-0828

Description

UnixWare pkg commands such as pkginfo, pkgcat, and pkgparam allow local users to read arbitrary files via the dacread permission.

Affected products

• sco / unixware7.0 – 7.0
• sco / unixware7.1 – 7.1

Exploits & proofs of concept

• exploit-dbSCO Unixware 7.1 pkginstall - Local Buffer Overflowby Brock Tellier
• exploit-dbSCO Unixware 7.1 pkgcat - Local Buffer Overflowby Brock Tellier
• exploit-dbSCO Unixware 7.1 - 'pkg' Local Privilege Escalationby Brock Tellier

References

• MISChttp://www.securityfocus.com/bid/853