Unscored severity · published Sep 17, 1993
CVE-1999-1138
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to…
–
CVSS
1.6%
EPSS
No
On KEV
Description
SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 75% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OD
Open Desktop · Sco
1.0; 2.0; 3.0 · source: NVD
OD
Open Desktop Lite · Sco
3.0 · source: NVD
OP
Openserver · Sco
3.0 · source: NVD
UN
Unix · Sco
system_v386_3.2_operating_system; system_v386_3.2_operating_system_2.0; system_v386_3.2_operating_system_4.0; system_v386_3.2_operating_system_4.x · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-1999-1138
CVE.org
https://www.cve.org/CVERecord?id=CVE-1999-1138
US Government Resource
http://www.cert.org/advisories/CA-1993-13.html
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/546
More from Open Desktop
5.4
CVE-1999-0011
Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer
–
CVE-2000-0307
Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a denial of service which prevents access to reserved port numbers below…
–
CVE-1999-1185
Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in the .mscreenrc file
–
CVE-1999-0010
Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages
–
CVE-1999-0009
Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases