Unscored severity · published Jan 4, 2006
CVE-2006-0072
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument
–
CVSS
4.9%
EPSS
No
On KEV
Description
Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.9% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Openserver · Sco
5.0; 5.0.1; 5.0.2; 5.0.3; 5.0.4; 5.0.5; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0072
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0072
Exploit
http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c
Exploit
http://www.securityfocus.com/archive/1/420677
Exploit
http://www.securityfocus.com/bid/16122
More from Openserver
9.8
CVE-2003-0791
The Script.prototype.freeze/thaw functionality in Mozilla 1.4 and earlier allows attackers to execute native methods by modifying the string used as input to the script.thaw…
7.5
CVE-2004-0079
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
5.4
CVE-1999-0011
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer
–
CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams…