CVE-2001-1148: Sco Openserver

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple buffer overflows in programs used by scoadmin and sysadmsh in SCO OpenServer 5.0.6a and earlier allow local users to gain privileges via a long TERM environment variable to (1) atcronsh, (2) auditsh, (3) authsh, (4) backupsh, (5) lpsh, (6) sysadm.menu, or (7) termsh.

Affected products

• Sco Openserver: up to and including 5.0.6a

Published 2001-06-13. Last modified 2026-06-16.