Open Desktop
Vendor:
First CVE: May 24, 1993 · Active for 33 years
19
Total CVEs
More Total CVEs than 93% of tracked products
3.2
Avg CVEs / Year
Higher CVE frequency than 81% of tracked products
6.7
Avg CVSS
Higher Avg CVSS than 34% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Open Desktop over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 24, 1993
33 years ago
Most Recent CVE
Mar 12, 2001
9,265 days ago
CVE Severity & Scoring
Open Desktop19 CVEs
42%
58%
All CVEs352,231 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown18 (94.7%)
Physical0 (0.0%)
Adjacent Network1 (5.3%)
Attack Complexity
Low1 (5.3%)
High0 (0.0%)
Unknown18 (94.7%)
User Interaction
None1 (5.3%)
Unknown18 (94.7%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None1 (5.3%)
Unknown18 (94.7%)
Top CVEs
Signals from CVEs in this product scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-1999-0128MEDIUM Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | Dec 18, 1996 | 5.0 | 63 | NO | YES |
CVE-1999-0009HIGH Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | Apr 8, 1998 | 10.0 | 54 | NO | YES |
CVE-1999-0023HIGH Local user gains root privileges via buffer overflow in rdist, via lookup() function. | Jul 24, 1996 | 7.2 | 29 | NO | YES |
CVE-1999-1185HIGH Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file. | Oct 6, 1998 | 7.2 | 27 | NO | YES |
CVE-1999-1138HIGH SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to g | Sep 17, 1993 | 10.0 | 25 | NO | NO |
CVE-1999-0017HIGH FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | Dec 10, 1997 | 7.5 | 23 | NO | NO |
CVE-1999-0033HIGH Command execution in Sun systems via buffer overflow in the at program. | Jun 12, 1997 | 7.2 | 20 | NO | NO |
CVE-1999-0011MEDIUM Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. | Apr 8, 1998 | 5.4 | 19 | NO | NO |
CVE-1999-0024MEDIUM DNS cache poisoning via BIND, by predictable query IDs. | Aug 13, 1997 | 5.0 | 19 | NO | NO |
CVE-1999-1209HIGH Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain root privileges. | Nov 20, 1997 | 7.2 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (19 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
4 CVEs
21.1% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (19 CVEs).
Media Mentions
Signals from CVEs in this product scope (19 CVEs).
Top CNAs Publishing CVEs For Open Desktop
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 5.0 | 1 | 10.0 | 29.0% | 0 | 1 |
| 3.0 | 15 | 7.0 | 8.3% | 0 | 4 |
| 3 | 2 | 5.0 | 1.5% | 0 | 0 |
| 2.0 | 7 | 7.5 | 0.7% | 0 | 1 |
| 2 | 1 | 5.0 | 1.6% | 0 | 0 |
| 1.1 | 1 | 6.4 | 1.2% | 0 | 0 |
| 1.0 | 1 | 10.0 | 1.6% | 0 | 0 |