Vulnerabilities (CVE)

Filtered by vendor Caldera Subscribe
Total 82 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-2933 1 Caldera 1 Caldera 2024-02-28 5.0 MEDIUM N/A
Directory traversal vulnerability in dirmng/index.php in Caldera 9.20 allows remote attackers to access arbitrary directories via a crafted pathname.
CVE-2014-2936 1 Caldera 1 Caldera 2024-02-28 7.5 HIGH N/A
The directory manager in Caldera 9.20 allows remote attackers to conduct variable-injection attacks in the global scope via (1) the maindir_hotfolder parameter to dirmng/index.php, or an unspecified parameter to (2) PPD/index.php, (3) dirmng/docmd.php, or (4) dirmng/param.php.
CVE-2014-2935 1 Caldera 1 Caldera 2024-02-28 10.0 HIGH N/A
costview3/xmlrpc_server/xmlrpc.php in CostView in Caldera 9.20 allows remote attackers to execute arbitrary commands via shell metacharacters in a methodCall element in a PHP XMLRPC request.
CVE-2014-2934 1 Caldera 1 Caldera 2024-02-28 7.5 HIGH N/A
Multiple SQL injection vulnerabilities in Caldera 9.20 allow remote attackers to execute arbitrary SQL commands via the tr parameter to (1) costview2/jobs.php or (2) costview2/printers.php.
CVE-2002-0911 1 Caldera 1 Volution Manager 2024-02-28 7.2 HIGH N/A
Caldera Volution Manager 1.1 stores the Directory Administrator password in cleartext in the slapd.conf file, which could allow local users to gain privileges.
CVE-2002-0442 1 Caldera 1 Openserver 2024-02-28 7.2 HIGH N/A
Buffer overflow in dlvr_audit for Caldera OpenServer 5.0.5 and 5.0.6 allows local users to gain root privileges.
CVE-2002-0988 1 Caldera 2 Openunix, Unixware 2024-02-28 10.0 HIGH N/A
Buffer overflow in X server (Xsco) in OpenUNIX 8.0.0 and UnixWare 7.1.1, possibly related to XBM/xkbcomp capabilities.
CVE-2002-0827 1 Caldera 2 Openunix, Unixware 2024-02-28 7.2 HIGH N/A
Vulnerability in pppd on UnixWare 7.1.1 and Open UNIX 8.0.0 allows local users to gain root privileges via (1) ppptalk or (2) ppp, a different vulnerability than CVE-2002-0824.
CVE-2002-1199 3 Caldera, Sco, Sun 4 Openlinux, Openserver, Solaris and 1 more 2024-02-28 5.0 MEDIUM N/A
The getdbm procedure in ypxfrd allows local users to read arbitrary files, and remote attackers to read databases outside /var/yp, via a directory traversal and symlink attack on the domain and map arguments.
CVE-2002-0105 1 Caldera 1 Unixware 2024-02-28 7.2 HIGH N/A
CDE dtlogin in Caldera UnixWare 7.1.0, and possibly other operating systems, allows local users to gain privileges via a symlink attack on /var/dt/Xerrors since /var/dt is world-writable.
CVE-1999-0880 2 Bsdi, Caldera 2 Bsd Os, Openlinux 2024-02-28 5.0 MEDIUM N/A
Denial of service in WU-FTPD via the SITE NEWER command, which does not free memory properly.
CVE-2000-0369 1 Caldera 1 Openlinux 2024-02-28 5.0 MEDIUM N/A
The IDENT server in Caldera Linux 2.3 creates multiple threads for each IDENT request, which allows remote attackers to cause a denial of service.
CVE-2001-1576 1 Caldera 1 Unixware 2024-02-28 4.6 MEDIUM N/A
Buffer overflow in cron in Caldera UnixWare 7 allows local users to execute arbitrary code via a command line argument.
CVE-2000-0844 13 Caldera, Conectiva, Debian and 10 more 16 Openlinux, Openlinux Ebuilder, Openlinux Eserver and 13 more 2024-02-28 10.0 HIGH N/A
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
CVE-1999-0234 5 Caldera, Redhat, Sgi and 2 more 5 Openlinux, Linux, Irix and 2 more 2024-02-28 4.6 MEDIUM N/A
Bash treats any character with a value of 255 as a command separator.
CVE-2001-1359 1 Caldera 1 Volution 2024-02-28 10.0 HIGH N/A
Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which allows remote attackers to fully control clients via a Trojan horse Volution server.
CVE-2000-0372 1 Caldera 1 Openlinux 2024-02-28 7.2 HIGH N/A
Vulnerability in Caldera rmt command in the dump package 0.4b4 allows a local user to gain root privileges.
CVE-1999-0731 1 Caldera 1 Openlinux 2024-02-28 4.6 MEDIUM N/A
The KDE klock program allows local users to unlock a session using malformed input.
CVE-2001-0181 1 Caldera 3 Openlinux Desktop, Openlinux Edesktop, Openlinux Eserver 2024-02-28 10.0 HIGH N/A
Format string vulnerability in the error logging code of DHCP server and client in Caldera Linux allows remote attackers to execute arbitrary commands.
CVE-2000-0530 2 Caldera, Kde 2 Openlinux, Kde 2024-02-28 7.2 HIGH N/A
The KApplication class in the KDE 1.1.2 configuration file management capability allows local users to overwrite arbitrary files.