← Back to browse · API

CVE-1999-1138

Severity
HIGH
CVSS
10.0
EPSS
0.01577
Risk score
40.55
CISA KEV
No
PoC
No
Published
2002-03-09
Modified
2024-08-01
First seen
2026-08-05
Aliases
EUVD-1999-1119, GHSA-XJV5-HX29-64JX
Products
n/a:n/a n/a, sco:open_desktop, sco:open_desktop_lite, sco:openserver, sco:unix
Sources
nvd CVE-1999-1138
euvd EUVD-1999-1119

Description

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

References