search menu icon-carat-right cmu-wordmark

CERT Coordination Center

SCO OpenServer vulnerable to privilege escalation in 'scosession' argument handling

Vulnerability Note VU#972598

Original Release Date: 2005-02-21 | Last Revised: 2005-02-21

Overview

A vulnerability in a program supplied with the SCO OpenServer operating system may allow local attackers to gain elevated privileges.

Description

SCO OpenServer is a UNIX-like operating system for Intel and AMD platforms. The 'scosession' session handling component, which is responsible for starting and stopping X server sessions, contains a flaw in the handling of command-line arguments which may allow a local authenticated attacker to gain elevated privileges. This applies to SCO OpenServer 5.0.6 and 5.0.7.

Impact

Local authenticated users may gain elevated privileges on affected platforms.

Solution

Apply an update

Updates for SCO OpenServer 5.0.6 and 5.0.7 are available at this time. More information can be found in SCO Security Advisory SCOSA-2005.5.

Vendor Information

972598
 
Affected   Unknown   Unaffected

SCO

Notified:  January 25, 2005 Updated:  January 28, 2005

Status

  Vulnerable

Vendor Statement

Please see the following link for more information from SCO on this issue:

<ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.5/SCOSA-2005.5.txt>

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

US-CERT has no additional comments at this time.

If you have feedback, comments, or additional information about this vulnerability, please send us email.


CVSS Metrics

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A

References

Acknowledgements

Thanks to SCO Security for reporting this vulnerability, who in turn credit Joel Soderberg and Christer Oberg of Deprotect with the discovery.

This document was written by Ken MacInnis.

Other Information

CVE IDs: CVE-2003-1021
Severity Metric: 7.29
Date Public: 2005-01-25
Date First Published: 2005-02-21
Date Last Updated: 2005-02-21 21:25 UTC
Document Revision: 12

Sponsored by the Department of Homeland Security Office of Cybersecurity and Communications.