CVE-2004-1124: Medium severity sco unixware vulnerability

Published Jan 14, 2004

Updated

Unknown vulnerability in chroot on SCO UnixWare 7.1.1 through 7.1.4 allows local users to escape the chroot jail and conduct unauthorized activities.

Affected Software

5 affected components

SCO OpenServer=5.0.6

SCO OpenServer=5.0.7

SCO UnixWare=7.1.1

SCO UnixWare=7.1.3

SCO UnixWare=7.1.4

Remediation

Patch Available

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.2/SCOSA-2005.2.txt

Event History

Jan 14, 2004

CVE Published

05:00 AM

Data Sourced

via NVD·05:00 AM

RemedyDescriptionSeverityAffected Software

Jan 29, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1124?

CVE-2004-1124 is considered a high severity vulnerability due to its potential to allow local users to escape chroot jails.

How do I fix CVE-2004-1124?

To mitigate CVE-2004-1124, users should upgrade to the latest versions of SCO UnixWare and OpenServer that do not contain this vulnerability.

Who is affected by CVE-2004-1124?

CVE-2004-1124 affects local users of SCO UnixWare versions 7.1.1 to 7.1.4 and SCO OpenServer versions 5.0.6 and 5.0.7.

What types of attacks could exploit CVE-2004-1124?

Attackers can exploit CVE-2004-1124 to conduct unauthorized activities by escaping the confines of the chroot jail.

What are chroot jails in relation to CVE-2004-1124?

Chroot jails are designed to limit a user's access to the filesystem, but CVE-2004-1124 allows local users to bypass these restrictions.