CVE-2006-0072

Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.

Affected products

Openserver, Termsh

Sco Openserver

= 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.6a, 5.0.7

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

4.9% (91th percentile)

NVD status

Modified

Published

2006-01-04