CVE-2000-0224

SCO UnixWare 7.x - Privilege Escalation

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-0224. PoCs published by Shawn Bracken.

AI-analyzed exploit summary This exploit leverages a symlink following vulnerability in the ARCserve agent (asagent) on SCO Unixware 7. By replacing a temporary file in /tmp with a symlink, an attacker can create arbitrary files owned by root, using the contents of a world-writable configuration file.

Description

ARCserve agent in SCO UnixWare 7.x allows local attackers to gain root privileges via a symlink attack.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Shawn Bracken · textlocalsco

https://www.exploit-db.com/exploits/19752

View Code ZIP pw:eip

This exploit leverages a symlink following vulnerability in the ARCserve agent (asagent) on SCO Unixware 7. By replacing a temporary file in /tmp with a symlink, an attacker can create arbitrary files owned by root, using the contents of a world-writable configuration file.

Classification

Working Poc 95%

Attack Type

Lpe

Complexity

Trivial

Reliability

Reliable

Target: ARCserve agent on SCO Unixware 7

No auth needed

Prerequisites: Access to a local user account on the target system · World-writable /usr/CYEagent/agent.cfg file

MITRE ATT&CK

T1068 - Exploitation for Privilege Escalation

mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1

Core References

Third Party Advisory, VDB Entry vendor-advisory x_refsource_nai

http://www.securityfocus.com/templates/archive.pike?list=1&date=2000-02-15&msg=000101bf78af%2494528870%244d2f45a1%40jmagdych.na.nai.com

Scores

EPSS 0.0056

EPSS Percentile 42.8%

Details

Status published

Products (2)

sco/unixware 7.1

sco/unixware 7.1.1

Published Feb 15, 2000

Tracked Since Feb 18, 2026