COMMAND

	/bin/sar buffer overflow

SYSTEMS AFFECTED

	Caldera OpenServer OpenServer 5.0.5 sar,cpusar,mpsar

PROBLEM

	Caldera reports thanks to KF [dotslash@snosoft.com] findings :
	

	If the /usr/bin/sar command is given an  exceedingly  long  argument  to
	the o option, it will memory fault. This could allow  a  malicious  user
	to elevate their permissions.

SOLUTION

	Get :
	

	ftp://stage.caldera.com/pub/security/openserver/CSSA-2002-SCO.17