Unscored severity · published Aug 12, 2002
CVE-2002-0517
Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long -xrm argument to programs such as (1) dtterm or (2) xterm.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openunix · Caldera
8.0 · source: NVD
UN
Unixware · Caldera
7.1.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0517
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0517
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-01/0099.html
Patch
http://www.iss.net/security_center/static/7282.php
www.iss.net
http://www.iss.net/security_center/static/8828.php
US Government Resource
http://www.kb.cert.org/vuls/id/169059
Vendor Advisory
http://www.securityfocus.com/archive/1/249106
More from Openunix
–
CVE-2002-1231
SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc
–
CVE-2002-0885
Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute…
–
CVE-2002-0884
Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to…
–
CVE-2002-0988
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities
–
CVE-2002-0987
X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges