CyberSec.Space Logo
返回 CVE 浏览器

CVE-2020-25494

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1630%
EPSS Percentile36.70th
Published2020年12月18日
Last Modified2024年11月21日

Vulnerability Description

Xinuos (formerly SCO) Openserver v5 and v6 allows attackers to execute arbitrary commands via shell metacharacters in outputform or toclevels parameter to cgi-bin/printbook.

Affected Platforms (CPE)

📦
Xinuos

Openserver

= 5.0.7
📦
Xinuos

Openserver

= 6.0

References & Advisories

🔗 http://packetstormsecurity.com/files/160635/SCO-Openserver-5.0.7-Command-Injection.html
🔗 https://github.com/Ramikan/Vulnerabilities/blob/master/SCO%20Openserver%20OS%20Command%20Injection%20Vulnerability
🔗 http://packetstormsecurity.com/files/160635/SCO-Openserver-5.0.7-Command-Injection.html
🔗 https://github.com/Ramikan/Vulnerabilities/blob/master/SCO%20Openserver%20OS%20Command%20Injection%20Vulnerability

相关漏洞威胁

CVE-2000-030610.0

Buffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.

CVE-2001-05797.5

lpadmin in SCO OpenServer 5.0.6 can allow a local attacker to gain additional privileges via a buffer overflow attack in the first...

CVE-1999-14507.5

Vulnerability in (1) rlogin daemon rshd and (2) scheme on SCO UNIX OpenServer 5.0.5 and earlier, and SCO UnixWare 7.0.1 and earlie...

CVE-2004-03907.5

SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows re...