CVEvulnerability

CVE-1999-1138

10.0 HIGH Published 1993-09-17 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1993-09-17
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Affected configurations

• sco open desktop 1.0 • sco open desktop 2.0 • sco open desktop 3.0 • sco open desktop lite 3.0 • sco openserver 3.0 • sco unix system v386 3.2 operating system • sco unix system v386 3.2 operating system 2.0 • sco unix system v386 3.2 operating system 4.0 • sco unix system v386 3.2 operating system 4.x

References