> CVE-1999-1138 [CRITICAL]

« BACK_TO_HOME
PUBLISHED
1993-09-17 04:00
MODIFIED
2025-04-03 01:03
EPSS (Prob. Exploit)
1.56%
Top 25.1%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-10-19 FIRST EPSS 🔗 2026-10-18

> DESCRIPTION

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

> AFFECTED_PRODUCTS

Sco - Open Desktop
Version: 1.0
Sco - Open Desktop
Version: 2.0
Sco - Open Desktop
Version: 3.0
Sco - Unix
Version: system v386 3.2 operating system
Sco - Unix
Version: system v386 3.2 operating system 2.0
Sco - Unix
Version: system v386 3.2 operating system 4.0
Sco - Unix
Version: system v386 3.2 operating system 4.x
Sco - Open Desktop Lite
Version: 3.0
Sco - Openserver
Version: 3.0

> HISTORIQUE DES MODIFICATIONS

Première apparition
17/09/1993 04:00
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 12:45
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME