CVE-1999-1138

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 1993-09-17 · updated 2026-06-16

Description

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Affected products

Sco Open Desktop: 1.0, 2.0, 3.0
Sco Open Desktop Lite: 3.0
Sco Openserver: 3.0
Sco Unix: system_v386_3.2_operating_system, system_v386_3.2_operating_system_2.0, system_v386_3.2_operating_system_4.0, system_v386_3.2_operating_system_4.x

References

http://www.cert.org/advisories/CA-1993-13.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/546
http://www.cert.org/advisories/CA-1993-13.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/546

Get alerted when CVE-1999-1138 or the next vulnerability affects your stack