CVE-1999-1138
Critical
Description
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Sco Unix
PublishedSep 17, 1993
First seenSep 17, 1993
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sco unix | system_v386_3.2_operating_system, system_v386_3.2_operating_system_2.0, system_v386_3.2_operating_system_4.0, system_v386_3.2_operating_system_4.x | — |
| sco open_desktop | 1.0, 2.0, 3.0 | — |
| sco open_desktop_lite | 3.0 | — |
| sco openserver | 3.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.