CVE-1999-1185

Description

Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file.

Affected products

• sco / cmw3.0 – 3.0
• sco / internet_faststartall_versions – all_versions
• sco / open_desktop3.0 – 3.0
• sco / openserver3.0 – 3.0
• sco / openserver5.0 – 5.0
• sco / openserver_enterprise_system5.0.4p – 5.0.4p

Exploits & proofs of concept

• exploit-dbSCO OpenServer 5.0.5 - Env Local Stack Overflowby K2

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/1379
• MAILING_LISThttp://marc.info/?l=bugtraq&m=90686250717719&w=2