Vulnerability record · CVE-2004-1039 · published 11 January 2005

CVE-2004-1039: Sco openserver vulnerability

SSco · Openserver

The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.

5.0 CVSS 2.0 Medium EPSS 1.6% · top 25.3%

5.0CVSS 2.0 base score

1.6%EPSS exploitation probability, 30 days

NoNot in CISA KEV

2Affected product versions listed by NVD

8References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

SOpenserver Sco SUnixware Sco

References

Link	Tags
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.1/SCOSA-2005.1.txt	PatchVendor Advisory
http://secunia.com/advisories/13805
http://www.securityfocus.com/archive/1/386814	PatchVendor Advisory
http://www.securityfocus.com/bid/12225
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.1/SCOSA-2005.1.txt	PatchVendor Advisory
http://secunia.com/advisories/13805
http://www.securityfocus.com/archive/1/386814	PatchVendor Advisory
http://www.securityfocus.com/bid/12225

Track CVE-2004-1039 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3625Easy software products cups vulnerabilityXpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of servic…EPSS 3.8%31 Dec 2005 10.0CVE-2001-0797System V login buffer overflow via excessive argumentsThe login program on multiple System V based operating systems contains a buffer overflow that is triggered when a large number of arguments is passe…EPSS 95%analysed12 Dec 2001 10.0CVE-2000-0306Sco openserver vulnerabilityBuffer overflow in calserver in SCO OpenServer allows remote attackers to gain root access via a long message.EPSS 3.7%12 Mar 2001 10.0CVE-2000-0308Netscape enterprise server vulnerabilityInsecure file permissions for Netscape FastTrack Server 2.x, Enterprise Server 2.0, and Proxy Server 2.5 in SCO UnixWare 7.0.x and 2.1.3 allow an att…EPSS 2.2%12 Mar 2001 10.0CVE-2000-0348Sco unixware vulnerabilityA vulnerability in the Sendmail configuration file sendmail.cf as installed in SCO UnixWare 7.1.0 and earlier allows an attacker to gain root privile…EPSS 1.5%12 Mar 2001 10.0CVE-2000-0003Sco unixware vulnerabilityBuffer overflow in UnixWare rtpm program allows local users to gain privileges via a long environmental variable.EPSS 1.4%30 Dec 1999 10.0CVE-2000-0026Windowmaker wmmon vulnerabilityBuffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password authorization string.EPSS 4.6%21 Dec 1999 10.0CVE-1999-0835Ibm aix vulnerabilityDenial of service in BIND named via malformed SIG records.EPSS 1.5%10 Nov 1999

Source: NIST National Vulnerability Database (record CVE-2004-1039), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.