"SCO Unixware is a Unix operating system that runs on many OEM platforms."
Local exploitation of a buffer overflow vulnerability in the uidadmin binary included in multiple versions of The SCO Group Inc.'s Unixware allows attackers to gain root privileges and execute arbitrary code.
Vulnerable Systems:
* SCO Unixware version 7.1.3
* SCO Unixware version 7.1.4
The vulnerability specifically exists because of a failure to check the length of user specified file input. If the user prepares a file longer than 1,600 bytes and supplies the path to that file using the "-S" option of uidadmin, a stack based buffer overflow occurs. This leads to the execution of arbitrary code with root privileges, as uidadmin is setuid root by default.
Successful exploitation of this vulnerability requires that a user have local access to the system. This would allow the user to gain super user privileges and execute arbitrary code.
