What does the command "ls -l /bin/passwd /bin/ls" show? I seem to remember that sco had just a bunch of symlinks in /bin. If that's right, someone may have simply replaced the passwd symlink.