Buffer overflow in termsh on SCO OpenServer 5.0.7 allows remote attackers to execute arbitrary code via a long -o command line argument. NOTE: this is probably a different vulnerability than CVE-2005-0351 since it involves a distinct attack vector.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-0080
http://www.securityfocus.com/bid/16122
http://www.securityfocus.com/archive/1/420677
http://downloads.securityfocus.com/vulnerabilities/exploits/Openserver_bof.c