CVE-1999-1138: Sco Open Desktop

High severity, CVSS 10.0. EPSS: 1.6% chance of exploitation in the next 30 days.

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Affected products

• Sco Open Desktop: version 1.0 only; version 2.0 only; version 3.0 only
• Sco Open Desktop Lite: version 3.0 only
• Sco Openserver: version 3.0 only
• Sco Unix: version system_v386_3.2_operating_system only; version system_v386_3.2_operating_system_2.0 only; version system_v386_3.2_operating_system_4.0 only; version system_v386_3.2_operating_system_4.x only

Published 1993-09-17. Last modified 2026-06-16.