CVE Feed

    Dashboard / CVE / CVE-1999-1138

    CVE-1999-1138

    SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

    Published:Sep 17, 1993
    Last Modified:Apr 16, 2026
    EPS:Mar 9, 2002
    EPSS Score:0.00534
    CVSS Score:10

    Affected Products

    Vendor
    Sco
    Product
    Open Desktop
    Vendor
    Sco
    Product
    Open Desktop Lite
    Vendor
    Sco
    Product
    Openserver
    Vendor
    Sco
    Product
    Unix

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2000-0307 (CVSS 5) — Vulnerability in xserver in SCO UnixWare 2.1.x and OpenServer 5.05 and earlier allows an attacker to cause a d…
    CVE-1999-1185 (CVSS 7.2) — Buffer overflow in SCO mscreen allows local users to gain root privileges via a long terminal entry (TERM) in …
    CVE-1999-0011 (CVSS 5.4) — Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.…
    CVE-1999-0010 (CVSS 5) — Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.…
    CVE-1999-0009 (CVSS 10) — Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.…
    CVE-1999-0017 (CVSS 7.5) — FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP…
    CVE-1999-1209 (CVSS 7.2) — Vulnerability in scoterm in SCO OpenServer 5.0 and SCO Open Desktop/Open Server 3.0 allows local users to gain…
    CVE-1999-0024 (CVSS 5) — DNS cache poisoning via BIND, by predictable query IDs.…
    CVE-1999-0033 (CVSS 7.2) — Command execution in Sun systems via buffer overflow in the at program.…
    CVE-1999-0345 (CVSS 5) — Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High