CVE-2005-2927: Buffer Overflow

Published Oct 25, 2005

Updated

Stack-based buffer overflow in ppp in SCO Unixware 7.1.3 and 7.1.4, and possibly earlier versions, allows local users to execute arbitrary code via a long argument to the (1) prompt or (2) defprompt command.

Affected Software

2 affected components

SCO UnixWare=7.1.3

SCO UnixWare=7.1.4

Remediation

Patch Available

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.41/SCOSA-2005.41.txt

Event History

Oct 25, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2927?

CVE-2005-2927 is classified as a high severity vulnerability due to its potential for local users to execute arbitrary code.

How do I fix CVE-2005-2927?

To fix CVE-2005-2927, update SCO Unixware to the latest patched version that addresses this buffer overflow issue.

Who is affected by CVE-2005-2927?

The affected users are those running SCO Unixware versions 7.1.3 and 7.1.4, as well as possibly earlier versions.

What type of vulnerability is CVE-2005-2927?

CVE-2005-2927 is a stack-based buffer overflow vulnerability found in the ppp component of SCO Unixware.

Can remote users exploit CVE-2005-2927?

No, CVE-2005-2927 can only be exploited by local users with access to the affected system.