Sco vulnerabilitiesNone on the known-exploited list.
Sco has 129 published vulnerabilities across 16 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Openserver, with 72. If you run Sco software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Sco products have the most vulnerabilities?
Openserver leads with 72 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Sco vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Sco's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Sco flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 95%CVE-2001-0797Critical
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
- 75%CVE-1999-0128Medium
Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.
- 40%CVE-1999-0368Critical
Buffer overflows in wuarchive ftpd (wu-ftpd) and ProFTPD lead to remote root access, a.k.a.
- 32%CVE-1999-0524Medium
ICMP information such as (1) netmask and (2) timestamp is allowed from arbitrary hosts.
- 29%CVE-1999-0009Critical
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
- 22%
Directory traversal vulnerability in UnZip 5.50 allows attackers to overwrite arbitrary files via invalid characters between two .
- 21%CVE-1999-0153Medium
Windows 95/NT out of band (OOB) data denial of service through NETBIOS port, aka WinNuke.
- 12%CVE-2000-1014High
Format string vulnerability in the search97.cgi CGI script in SCO help http server for Unixware 7 allows remote attackers to execute arbitrary commands via format characters in the queryText parameter.
- 10%CVE-2004-0112Medium
The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause...
- 9.5%CVE-2004-0079High
The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.
All Sco products we track.
14 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Openserveropenserver72 vulnerabilities14 versions
- Unixwareunixware66 vulnerabilities22 versions
- Open Desktopopen_desktop19 vulnerabilities7 versions
- Unixunix10 vulnerabilities8 versions
- Internet Faststartinternet_faststart9 vulnerabilities3 versions
- Open Desktop Liteopen_desktop_lite5 vulnerabilities1 version
- Open Unixopen_unix5 vulnerabilities2 versions
- Openserver Enterprise Systemopenserver_enterprise_system5 vulnerabilities2 versions
- Openserver Network Systemopenserver_network_system4 vulnerabilities1 version
- Tcp IPtcp_ip2 vulnerabilities2 versions
- Cmwcmw1 vulnerability1 version
- Openlinux Serveropenlinux_server1 vulnerability1 version
- Openlinux Workstationopenlinux_workstation1 vulnerability1 version
- Relianthareliantha1 vulnerability1 version
This directory lists the 14 Sco products with at least one tracked version, of 16 in our catalogue.
Running Sco? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.
- Matched to
- Sco on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 129 published vulnerabilities across 16 products and 66 versions from Sco.
None of Sco's vulnerabilities is on the list of flaws known to be exploited today.
Openserver, with 72 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Sco products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.