Unscored severity · published Apr 7, 2008
CVE-2008-0310
Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified…
–
CVSS
1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
UN
Unixware · Sco
7.1.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0310
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0310
ftp.sco.com
http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676
Vendor Advisory
http://secunia.com/advisories/29657
Patch
http://www.sco.com/support/update/download/release.php?rid=324
www.securitytracker.com
http://www.securitytracker.com/id?1019787
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41759
More from Unixware
5.6
CVE-2005-0109
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to…
5.4
CVE-1999-0011
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer
–
CVE-2009-1552
Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers to cause a denial of service (system panic) via unspecified vectors
–
CVE-2008-6559
Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains
–
CVE-2008-6558
Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges by modifying the RELIANT_PATH…