PatchTheCVEsco vulnerabilities
Recent CVEs affecting sco products. 4 tracked.
sco has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2011-03-16. Highest priority: CVE-2011-1432 (score 45/100).
- CVE-2011-1432 MEDIUM 6.8 MITIGATE The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man
- CVE-2009-1552 HIGH 7.8 MITIGATE Unspecified vulnerability in the IGMP driver in SCO Unixware Release 7.1.4 Maintenance Pack 4 allows attackers
- CVE-2008-6559 HIGH 7.2 DOWNGRADE MITIGATE Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d
- CVE-2008-6558 HIGH 7.2 MITIGATE DOWNGRADE Untrusted search path vulnerability in (1) hvdisp and (2) rcvm in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows
FAQ
How do I fix sco vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sco being exploited right now?
None of the tracked sco CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sco CVE should I patch first?
CVE-2011-1432 currently ranks highest (45/100): The STARTTLS implementation in SCO SCOoffice Server does not properly restrict I/O buffering, which allows man.