CVEvulnerability
CVE-2008-0310
6.9 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-07
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.9 MEDIUM — AV:L/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.
Affected configurations
• sco unixware 7.1.4
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt ftp.sco.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676 labs.idefense.com
- http://secunia.com/advisories/29657 Vendor Advisory
- http://www.sco.com/support/update/download/release.php?rid=324 Patch, Vendor Advisory
- http://www.securitytracker.com/id?1019787 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41759 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5355 www.exploit-db.com
- http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt ftp.sco.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676 labs.idefense.com
- http://secunia.com/advisories/29657 Vendor Advisory
- http://www.sco.com/support/update/download/release.php?rid=324 Patch, Vendor Advisory
- http://www.securitytracker.com/id?1019787 www.securitytracker.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41759 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5355 www.exploit-db.com