CyberSec.Space Logo
Back to CVE Browser

CVE-2020-25494

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1630%
EPSS Percentile36.70th
PublishedDec 18, 2020
Last ModifiedNov 21, 2024

Vulnerability Description

Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook.

Affected Platforms (CPE)

📦
Xinuos

Openserver

= 5.0.7
📦
Xinuos

Openserver

= 6.0

References & Advisories

🔗 http://packetstormsecurity.com/files/160635/SCO-Openserver-5.0.7-Command-Injection.html
🔗 https://github.com/Ramikan/Vulnerabilities/blob/master/SCO%20Openserver%20OS%20Command%20Injection%20Vulnerability
🔗 http://packetstormsecurity.com/files/160635/SCO-Openserver-5.0.7-Command-Injection.html
🔗 https://github.com/Ramikan/Vulnerabilities/blob/master/SCO%20Openserver%20OS%20Command%20Injection%20Vulnerability

Related Vulnerabilities

CVE-2000-030610.0

Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.

CVE-2001-05797.5

lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first...

CVE-1999-14507.5

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlie...

CVE-2004-03907.5

SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows re...