CVE-1999-1138 Misconfiguration in n/a

What is CVE-1999-1138?

CVE-1999-1138 is a critical vulnerability in Sco Openserver, published on 9 Mar 2002. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Which versions are affected by CVE-1999-1138?

It affects 4 products.

Products include Sco Open Desktop, Sco Open Desktop Lite, Sco Openserver, Sco Unix.

How do I fix CVE-1999-1138?

No fix has been published for CVE-1999-1138 yet. Limit exposure of the affected software until one is available.

Is CVE-1999-1138 being exploited?

There is no known exploitation of CVE-1999-1138 in the wild and no public exploit code.

Other vulnerabilities in Sco Openserver

• CVE-1999-1209 Privilege escalation in n/a High 7.2
• CVE-1999-1302 Privilege escalation in n/a High 7.2
• CVE-1999-1303 Privilege escalation in n/a High 7.2
• CVE-1999-1304 Privilege escalation in n/a High 7.2
• CVE-1999-1305 Privilege escalation in n/a High 7.2

All Sco Openserver vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-xjv5-hx29-64jx.