World-writable Home Directories in SCO UNIX System V/386 Release 3.2 and SCO Products

CVE-1999-1138 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Learn more about our User Device Pen Test.