CVE-2008-6559

Exploit

EPSS 0.16%
Published 30.03.2009 20:30:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.

Affected products Warnungen 0 Metrics 2 CWE 1 References 8

Data is provided by the National Vulnerability Database (NVD)

Sco ≫ Reliantha Version1.1.4

Sco ≫ Unixware Version7.1.4

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.16%	0.334

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.2	3.9	10	AV:L/AC:L/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt

Vendor Advisory

http://secunia.com/advisories/30921

Vendor Advisory

http://www.osvdb.org/51234

http://www.securityfocus.com/bid/28625

Patch

Exploit

https://www.exploit-db.com/exploits/5357

https://nvd.nist.gov/vuln/detail/CVE-2008-6559

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-6559

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-6559

EUVD