CVE-1999-0845

CVE-1999-0845 describes a buffer overflow vulnerability in the SCO su program, affecting SCO UnixWare versions 2.1, 7.0, 7.0.1, 7.1, and 7.1.1. This flaw allows local users to achieve root access by providing an excessively long username. With a CVSS score of 7.2 (HIGH), the vulnerability is easily exploitable locally with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. While not currently listed on CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation or significant community discussion.