CVE-2008-6559

HighPublished

Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences...

Published: Mar 30, 2009
Updated: Aug 7, 2024
Assigning CNA: mitre
Evidence observed: Apr 4, 2008

Primary CVSS

7.2/ 10High

nvd · CVSS 2.0

AV:L/AC:L/Au:N/C:C/I:C/A:C

EPSS probability estimate

0.8%

Low · next 30 days

Percentile: 55.7%
Model date: Oct 15, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

Summary

Merge mcd in ReliantHA 1.1.4 in SCO UnixWare 7.1.4 allows local users to gain root privileges via a crafted -d argument that contains .. (dot dot) sequences that point to a directory containing a file whose name includes shell metacharacters.

Sources

SCO UnixWare Merge - 'mcd' Local Privilege EscalationExploit
qaaz · sco · Apr 4, 2008

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.