CVE-1999-0979

Description

The SCO UnixWare privileged process system allows local users to gain root privileges by using a debugger such as gdb to insert traps into _init before the privileged process is executed.

Affected products

• sco / unixware7.0 – 7.0
• sco / unixware7.0.1 – 7.0.1
• sco / unixware7.1 – 7.1
• sco / unixware7.1.1 – 7.1.1

Exploits & proofs of concept

• exploit-dbSCO Unixware 7.0/7.0.1/7.1/7.1.1 - Privileged Program Debuggingby Brock Tellier

References

• MISChttp://www.securityfocus.com/bid/869
• MAILING_LISThttp://marc.info/?l=bugtraq&m=94530783815434&w=2