--- title: "sco openserver vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/sco/openserver type: product description: "sco openserver has 72 published CVEs, 0 in CISA KEV and 26 with public exploits." updated: 2006-01-06 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # sco openserver vulnerabilities Vendor: [sco](https://radicalnotion.ai/vendor/sco) - **Published CVEs:** 72 - **In CISA KEV:** 0 - **With a public exploit:** 26 - **With a patch:** 7 - **Average CVSS:** 6.0 - **First CVE:** 1999-09-29 - **Latest CVE:** 2006-01-06 ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 8 | | High | 27 | | Medium | 28 | | Low | 9 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-119](https://radicalnotion.ai/cwe/cwe-119) | Improper Restriction of Operations within the Bounds of a Memory Buffer | 2 | | [CWE-399](https://radicalnotion.ai/cwe/cwe-399) | Resource Management Errors | 2 | | [CWE-1067](https://radicalnotion.ai/cwe/cwe-1067) | Excessive Execution of Sequential Searches of Data Resource | 1 | | [CWE-476](https://radicalnotion.ai/cwe/cwe-476) | NULL Pointer Dereference | 1 | | [CWE-502](https://radicalnotion.ai/cwe/cwe-502) | Deserialization of Untrusted Data | 1 | | [CWE-189](https://radicalnotion.ai/cwe/cwe-189) | Numeric Errors | 1 | | [CWE-125](https://radicalnotion.ai/cwe/cwe-125) | Out-of-bounds Read | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 1999 | 12 | | 2000 | 12 | | 2001 | 13 | | 2002 | 7 | | 2003 | 4 | | 2004 | 7 | | 2005 | 13 | | 2006 | 4 | ## Affected versions (top 12 of 21) | Version | Kind | CVEs | | --- | --- | --- | | 5.0.6 | range | 25 | | 5.0 | range | 24 | | 5.0.7 | range | 22 | | 5.0.5 | range | 16 | | 5.0.2 | range | 13 | | 5.0.4 | range | 10 | | 5.0.6a | range | 8 | | 3.0 | range | 6 | | 5.0.3 | range | 6 | | 5 | range | 5 | | 5.0.1 | range | 5 | | \<= 5.0.6 | range | 4 | ## CVEs (first 30 of 72, most severe first) | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2005-3626 | - | medium | 5.0 | No | Yes | Yes | | CVE-2005-3625 | - | critical | 10.0 | No | Yes | Yes | | CVE-2005-3624 | - | medium | 5.0 | No | Yes | Yes | | CVE-2006-0072 | - | high | 7.5 | No | Yes | No | | CVE-2005-2926 | - | medium | 4.6 | No | No | No | | CVE-2001-1578 | - | low | 2.1 | No | No | No | | CVE-2001-1508 | - | medium | 4.6 | No | No | No | | CVE-2004-1082 | - | high | 7.5 | No | No | No | | CVE-2004-0390 | - | high | 7.5 | No | Yes | No | | CVE-2003-0791 | - | critical | 9.8 | No | No | No | | CVE-2005-0351 | - | medium | 4.6 | No | No | No | | CVE-2005-0993 | - | medium | 4.6 | No | Yes | No | | CVE-2005-0109 | - | medium | 5.6 | No | No | Yes | | CVE-2004-1131 | - | high | 7.2 | No | No | No | | CVE-2003-1021 | - | high | 7.2 | No | No | No | | CVE-2004-1124 | - | medium | 4.6 | No | No | No | | CVE-2004-1039 | - | medium | 5.0 | No | No | No | | CVE-2004-0512 | - | low | 2.1 | No | Yes | No | | CVE-2004-0511 | - | low | 2.1 | No | Yes | No | | CVE-2004-0510 | - | high | 7.2 | No | Yes | No | | CVE-2002-1199 | - | medium | 5.0 | No | No | No | | CVE-2004-0112 | - | medium | 5.0 | No | No | Yes | | CVE-2004-0081 | - | medium | 5.0 | No | No | Yes | | CVE-2004-0079 | - | high | 7.5 | No | No | Yes | | CVE-2003-0872 | - | low | 2.1 | No | No | No | | CVE-2003-0742 | - | high | 7.2 | No | No | No | | CVE-2003-0597 | - | high | 7.2 | No | No | No | | CVE-2002-0716 | - | high | 7.2 | No | No | No | | CVE-1999-1571 | - | high | 7.2 | No | No | No | | CVE-2001-0896 | - | medium | 5.0 | No | No | No | ## Frequently asked questions ### How many CVEs does sco openserver have? sco openserver has 72 published CVE records since 1999. ### How many sco openserver CVEs are in CISA KEV? None of sco openserver's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for sco openserver vulnerabilities? Yes — 26 of sco openserver's CVEs have a known public exploit. ### Which versions of sco openserver are affected? 21 distinct sco openserver versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in sco openserver CVEs? sco openserver's CVEs most often map to these CWE weakness types: CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-399 (Resource Management Errors), CWE-1067 (Excessive Execution of Sequential Searches of Data Resource), CWE-476 (NULL Pointer Dereference). ### How many critical sco openserver vulnerabilities are there? sco openserver has 8 critical and 27 high-severity CVEs. ### What is the average severity of sco openserver CVEs? The average CVSS base score across sco openserver's scored CVEs is 6.0. ## Other products from this vendor - [unixware](https://radicalnotion.ai/vendor/sco/unixware) (66 CVEs) - [open desktop](https://radicalnotion.ai/vendor/sco/open-desktop) (19 CVEs) - [unix](https://radicalnotion.ai/vendor/sco/unix) (10 CVEs) - [internet faststart](https://radicalnotion.ai/vendor/sco/internet-faststart) (9 CVEs) - [open desktop lite](https://radicalnotion.ai/vendor/sco/open-desktop-lite) (5 CVEs) - [openserver enterprise system](https://radicalnotion.ai/vendor/sco/openserver-enterprise-system) (5 CVEs) - [open unix](https://radicalnotion.ai/vendor/sco/open-unix) (5 CVEs) - [openserver network system](https://radicalnotion.ai/vendor/sco/openserver-network-system) (4 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/sco/openserver). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.