CVE-2008-0310 EXPLOIT
6.9
MEDIUM · CVSS 2.0 · EPSS 1% (pctl 62)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in pkgadd in SCO UnixWare 7.1.4 before p534589 allows local users to create or append to arbitrary files via ".." sequences in an unspecified environment variable, probably PKGINST.
Scoring
| CVSS | 6.9 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:L/AC:M/Au:N/C:C/I:C/A:C |
| EPSS | 1.01% — more likely to be exploited than 62% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-04-07 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| sco | unixware |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | SCO UnixWare < 7.1.4 p534589 - 'pkgadd' Local Privilege Escalation | 2008-04-04 |
References
- http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676
- http://secunia.com/advisories/29657
- http://www.sco.com/support/update/download/release.php?rid=324
- http://www.securitytracker.com/id?1019787
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41759
- https://www.exploit-db.com/exploits/5355
- http://ftp.sco.com/pub/unixware7/714/security/p534589/p534589.txt
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=676
- http://secunia.com/advisories/29657
- http://www.sco.com/support/update/download/release.php?rid=324
- http://www.securitytracker.com/id?1019787
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41759
- https://www.exploit-db.com/exploits/5355
→ the Explorer · watch your stack · NVD