Vulnerability Report

CVE-2001-0578

Title: lpforms buffer overflow allows local privilege escalation

Privilege escalation

Proof Of Concept

PoC Available for CVE-2001-0578

CWE Category NVD-CWE-noinfo

Published Date Aug 22, 2001

Modified Date Apr 03, 2025

Exploit Status Available

Score 4.6 CVSS v2.0

Exploit Probability (EPSS)

0.55%

Vulnerability Summary

CVE-2001-0578: Buffer overflow in lpforms in SCO OpenServer 5.0-5.0.6 can allow a local attacker to gain additional privileges via a long first argument to the lpforms command.

Impacted Vendors

sco 1

caldera 1

Reference Links

http://archives.neohapsis.com/archives/bugtraq/2001-03/0416.html http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html https://exchange.xforce.ibmcloud.com/vulnerabilities/6293 http://archives.neohapsis.com/archives/bugtraq/2001-03/0416.html http://security-archive.merton.ox.ac.uk/bugtraq-200104/0221.html https://exchange.xforce.ibmcloud.com/vulnerabilities/6293

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

4.6

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:L/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2001-0578 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/20736

View Code

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

August 22, 2001 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.