10

CVE-1999-1138

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Data is provided by the National Vulnerability Database (NVD)
Sco ≫ Open Desktop Version1.0
Sco ≫ Open Desktop Version2.0
Sco ≫ Open Desktop Version3.0
Sco ≫ Open Desktop Lite Version3.0
Sco ≫ Openserver Version3.0
Sco ≫ Unix Versionsystem_v386_3.2_operating_system
Sco ≫ Unix Versionsystem_v386_3.2_operating_system_2.0
Sco ≫ Unix Versionsystem_v386_3.2_operating_system_4.0
Sco ≫ Unix Versionsystem_v386_3.2_operating_system_4.x
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.53% 0.665
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C