CA
Vendor
Caldera
127
CVEs
0
On KEV
0
New 30D
Products
OP9.8
Openlinux
Caldera
36 CVEs0 on KEV0 new
UN–
Unixware
Caldera
20 CVEs0 on KEV0 new
OP–
Openunix
Caldera
17 CVEs0 on KEV0 new
OE–
Openlinux Eserver
Caldera
10 CVEs0 on KEV0 new
OE–
Openlinux Edesktop
Caldera
8 CVEs0 on KEV0 new
OS–
Openlinux Server
Caldera
8 CVEs0 on KEV0 new
OW–
Openlinux Workstation
Caldera
8 CVEs0 on KEV0 new
OP–
Openserver
Caldera
5 CVEs0 on KEV0 new
CA–
Caldera
Caldera
4 CVEs0 on KEV0 new
OD–
Openlinux Desktop
Caldera
3 CVEs0 on KEV0 new
OE–
Openlinux Ebuilder
Caldera
3 CVEs0 on KEV0 new
CO–
Coas
Caldera
1 CVEs0 on KEV0 new
ND–
Network Desktop
Caldera
1 CVEs0 on KEV0 new
OL–
Openlinux Lite
Caldera
1 CVEs0 on KEV0 new
VO–
Volution
Caldera
1 CVEs0 on KEV0 new
VM–
Volution Manager
Caldera
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2014-2936 | CA Caldera Caldera | – | May 8 | The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to… |
| CVE-2014-2935 | CA Caldera Caldera | – | May 8 | costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP… |
| CVE-2014-2934 | CA Caldera Caldera | – | May 8 | Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2)… |
| CVE-2014-2933 | CA Caldera Caldera | – | May 8 | Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname |
| CVE-2003-0658 | OS Openlinux Server Caldera | – | Oct 20 | Docview before 1.1-18 in Caldera OpenLinux 3.1.1, SCO Linux 4.0, OpenServer 5.0.7, configures the Apache web server in a way that allows remote attackers to read arbitrary… |
| CVE-2002-1231 | UN Unixware Caldera | – | Nov 4 | SCO UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to cause a denial of service via an rcp call on /proc |
| CVE-2002-1199 | OP Openlinux Caldera | – | Oct 28 | The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on… |
| CVE-2002-0884 | UN Unixware Caldera | – | Oct 4 | Multiple format string vulnerabilities in in.rarpd (ARP server) on Solaris, Caldera UnixWare and Open UNIX, and possibly other operating systems, allows remote attackers to… |
| CVE-2002-0911 | VM Volution Manager Caldera | – | Oct 4 | Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges |
| CVE-2002-0887 | OP Openserver Caldera | – | Oct 4 | scoadmin for Caldera/SCO OpenServer 5.0.5 and 5.0.6 allows local users to overwrite arbitrary files via a symlink attack on temporary files, as demonstrated using log files |
| CVE-2002-0885 | UN Unixware Caldera | – | Oct 4 | Multiple buffer overflows in in.rarpd (ARP server) on Solaris, and possibly other operating systems including Caldera UnixWare and Open UNIX, allow remote attackers to execute… |
| CVE-2002-0835 | OS Openlinux Server Caldera | – | Oct 4 | Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via certain DHCP packets from Voice-Over-IP (VOIP) phones |
| CVE-2002-0981 | UN Unixware Caldera | – | Sep 24 | Buffer overflow in ndcfg command for UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to execute arbitrary code via a long command line |
| CVE-2002-0988 | UN Unixware Caldera | – | Sep 24 | Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities |
| CVE-2002-0987 | UN Unixware Caldera | – | Sep 24 | X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1 does not drop privileges before calling programs such as xkbcomp using popen, which could allow local users to gain privileges |
| CVE-2002-0679 | UN Unixware Caldera | – | Sep 5 | Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the… |
| CVE-2002-0512 | OS Openlinux Server Caldera | – | Aug 12 | startkde in KDE for Caldera OpenLinux 2.3 through 3.1.1 sets the LD_LIBRARY_PATH environment variable to include the current working directory, which could allow local users to… |
| CVE-2002-0827 | UN Unixware Caldera | – | Aug 12 | Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824 |
| CVE-2002-0517 | UN Unixware Caldera | – | Aug 12 | Buffer overflow in X11 library (libX11) on Caldera Open UNIX 8.0.0, UnixWare 7.1.1, and possibly other operating systems, allows local users to gain root privileges via a long… |
| CVE-2002-0442 | OP Openserver Caldera | – | Jul 26 | Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges |
| CVE-2002-0678 | UN Unixware Caldera | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC… |
| CVE-2002-0677 | UN Unixware Caldera | – | Jul 23 | CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument… |
| CVE-2002-0311 | UN Unixware Caldera | – | May 31 | Vulnerability in webtop in UnixWare 7.1.1 and Open UNIX 8.0.0 allows local and possibly remote attackers to gain root privileges via shell metacharacters in the -c argument for… |
| CVE-2002-0246 | UN Unixware Caldera | – | May 29 | Format string vulnerability in the message catalog library functions in UnixWare 7.1.1 allows local users to gain privileges by modifying the LC_MESSAGE environment variable to… |
| CVE-1999-1570 | OP Openserver Caldera | – | May 1 | Buffer overflow in sar for OpenServer 5.0.5 allows local users to gain root privileges via a long -o parameter |
| CVE-2002-0105 | UN Unixware Caldera | – | Mar 25 | CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is… |
| CVE-2002-0164 | OS Openlinux Server Caldera | – | Mar 15 | Vulnerability in the MIT-SHM extension of the X server on Linux (XFree86) 4.2.1 and earlier allows local users to read and write arbitrary shared memory, possibly to cause a… |
| CVE-2002-0004 | OS Openlinux Server Caldera | – | Feb 27 | Heap corruption vulnerability in the "at" program allows local users to execute arbitrary code via a malformed execution time, which causes at to free the same memory twice |
| CVE-2001-1478 | UN Unixware Caldera | – | Dec 31 | Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code |
| CVE-2001-1577 | UN Unixware Caldera | – | Dec 31 | Unknown vulnerability in CDE in Caldera OpenUnix 7.1.0, 7.1.1, and 8.0 allows an xterm session to gain privileges when the session is reused |
| CVE-2001-1576 | UN Unixware Caldera | – | Dec 31 | Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument |
| CVE-2001-0869 | OE Openlinux Eserver Caldera | – | Dec 21 | Format string vulnerability in the default logging callback function _sasl_syslog in common.c in Cyrus SASL library (cyrus-sasl) may allow remote attackers to execute arbitrary… |
| CVE-2001-0851 | OP Openlinux Caldera | – | Dec 6 | Linux kernel 2.0, 2.2 and 2.4 with syncookies enabled allows remote attackers to bypass firewall rules by brute force guessing the cookie |
| CVE-2001-0858 | OP Openunix Caldera | – | Dec 6 | Buffer overflow in pppattach and other linked PPP utilities in Caldera Open Unix 8.0 and UnixWare 7.1.0 and 7.1.1 allows local users to gain privileges |
| CVE-2001-0850 | OP Openlinux Caldera | – | Dec 6 | A configuration error in the libdb1 package in OpenLinux 3.1 uses insecure versions of the snprintf and vsnprintf functions, which could allow local or remote users to exploit… |
| CVE-2001-1062 | OP Openserver Caldera | – | Aug 31 | Buffer overflow in mana in OpenServer 5.0.6a and earlier allows local users to execute arbitrary code |
| CVE-2001-1063 | OP Openunix Caldera | – | Aug 31 | Buffer overflow in uidadmin in Caldera Open Unix 8.0.0 and UnixWare 7 allows local users to gain root privileges via a long -S (scheme) command line argument |
| CVE-2000-1195 | OE Openlinux Edesktop Caldera | – | Aug 31 | telnet daemon (telnetd) from the Linux netkit package before netkit-telnet-0.16 allows remote attackers to bypass authentication when telnetd is running with the -L command line… |
| CVE-2001-1153 | OP Openunix Caldera | – | Aug 28 | lpsystem in OpenUnix 8.0.0 allows local users to cause a denial of service and possibly execute arbitrary code via a long command line argument |
| CVE-2000-0892 | OP Openlinux Caldera | – | Jul 21 | Some telnet clients allow remote telnet servers to request environment variables from the client that may contain sensitive information, or remote web servers to obtain the… |
| CVE-2001-1030 | OS Openlinux Server Caldera | – | Jul 18 | Squid before 2.3STABLE5 in HTTP accelerator mode does not enable access control lists (ACLs) when the httpd_accel_host and http_accel_with_proxy off settings are used, which… |
| CVE-2001-0980 | OS Openlinux Server Caldera | – | Jul 17 | docview before 1.0-15 allows remote attackers to execute arbitrary commands via shell metacharacters that are processed when converting a man page to a web page |
| CVE-2001-1164 | UN Unixware Caldera | – | Jun 27 | Buffer overflow in uucp utilities in UnixWare 7 allows local users to execute arbitrary code via long command line arguments to (1) uucp, (2) uux, (3) bnuconvert, (4) uucico, (5)… |
| CVE-2001-1359 | VO Volution Caldera | – | Jun 8 | Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control… |
| CVE-2001-0181 | OD Openlinux Desktop Caldera | – | Mar 26 | Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands |
| CVE-2001-0178 | OE Openlinux Edesktop Caldera | – | Mar 26 | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and… |
| CVE-2001-0139 | OD Openlinux Desktop Caldera | – | Mar 12 | inn 2.2.3 allows local users to overwrite arbitrary files via a symlink attack in some configurations |
| CVE-2000-1134 | OP Openlinux Caldera | – | Jan 9 | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here… |
| CVE-2000-0917 | OE Openlinux Ebuilder Caldera | – | Dec 19 | Format string vulnerability in use_syslog() function in LPRng 3.6.24 allows remote attackers to execute arbitrary commands |
| CVE-2000-0844 | OE Openlinux Ebuilder Caldera | – | Nov 14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via… |
| CVE-2000-0372 | OP Openlinux Caldera | – | Jul 12 | Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges |
| CVE-2000-0594 | OD Openlinux Desktop Caldera | – | Jul 4 | BitchX IRC client does not properly cleanse an untrusted format string, which allows remote attackers to cause a denial of service via an invite to a channel whose name includes… |
| CVE-2000-0566 | OP Openlinux Caldera | – | Jul 3 | makewhatis in Linux man package allows local users to overwrite files via a symlink attack |
| CVE-2000-0530 | OP Openlinux Caldera | – | May 31 | The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files |
| CVE-2000-0491 | OP Openlinux Caldera | – | May 24 | Buffer overflow in the XDMCP parsing code of GNOME gdm, KDE kdm, and wdm allows remote attackers to execute arbitrary commands or cause a denial of service via a long… |
| CVE-2000-0438 | OP Openlinux Caldera | – | May 22 | Buffer overflow in fdmount on Linux systems allows local users in the "floppy" group to execute arbitrary commands via a long mountpoint parameter |
| CVE-2000-0192 | OP Openlinux Caldera | – | Mar 5 | The default installation of Caldera OpenLinux 2.3 includes the CGI program rpm_query, which allows remote attackers to determine what packages are installed on the system |
| CVE-2000-0218 | OP Openlinux Caldera | – | Feb 3 | Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname |
| CVE-2000-0531 | OP Openlinux Caldera | – | Nov 23 | Linux gpm program allows local users to cause a denial of service by flooding the /dev/gpmctl device with STREAM sockets |
| CVE-2000-0369 | OP Openlinux Caldera | – | Oct 8 | The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service |