CVE-2004-0390 Auth bypass in n/a
Remote attackers can bypass X session access controls in SCO OpenServer by using non-scologin login methods, gaining unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-0390?
CVE-2004-0390 is a high-severity authentication bypass vulnerability in Sco Openserver, published on 14 Apr 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.
Which versions are affected by CVE-2004-0390?
It affects 1 product.
Products include Sco Openserver.
How do I fix CVE-2004-0390?
No fix has been published for CVE-2004-0390 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2004-0390 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0390 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Sco Openserver
- CVE-2000-0306 Memory corruption in n/a
- CVE-2006-0072 Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument.
- CVE-1999-1450 Privilege escalation in n/a
- CVE-2001-0579 Memory corruption in n/a
- CVE-2000-0158 Memory corruption in n/a
Sources
Also known as GHSA-w27r-2xr6-37p7.