.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable. NIST National Vulnerability Database (NVD) -- services.nvd.nist.gov (CVE / CVSS / CPE). {"cve":{"id":"CVE-1999-1138","sourceIdentifier":"cve@mitre.org","published":"1993-09-17T04:00:00.000","lastModified":"2026-06-16T21:49:48.087","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable."}],"affected":[{"source":"cve@mitre.org","affectedData":[{"vendor":"n/a","product":"n/a","versions":[{"version":"n/a","status":"affected"}]}]}],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10.0,"impactScore":10.0,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-Other"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:1.0:*:*:*:*:*:*:*","matchCriteriaId":"4624BE70-B14C-470A-B0ED-133FAE688882"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:2.0:*:*:*:*:*:*:*","matchCriteriaId":"F2A765EC-A399-494A-A644-338FB2F014ED"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop:3.0:*:*:*:*:*:*:*","matchCriteriaId":"0AD2701A-E930-4F4D-85F7-02F80135E34E"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:open_desktop_lite:3.0:*:*:*:*:*:*:*","matchCriteriaId":"E1DFB7EF-5D8E-4BA9-A543-3997FA4DC433"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:openserver:3.0:*:*:*:*:*:*:*","matchCriteriaId":"7363FF35-7C67-40DC-AD38-74FD6264BF5A"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system:*:*:*:*:*:*:*","matchCriteriaId":"BFE6762F-886D-4FC9-8AE5-C462BF42E403"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system_2.0:*:*:*:*:*:*:*","matchCriteriaId":"02948256-49AE-415E-8B64-27DA246B7A57"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system_4.0:*:*:*:*:*:*:*","matchCriteriaId":"1005628A-0E07-485C-9E88-353A86E83BD0"},{"vulnerable":true,"criteria":"cpe:2.3:o:sco:unix:system_v386_3.2_operating_system_4.x:*:*:*:*:*:*:*","matchCriteriaId":"207FB7B7-C6FF-4D9F-9E6D-34E6CF7E2146"}]}]}],"references":[{"url":"http://www.cert.org/advisories/CA-1993-13.html","source":"cve@mitre.org","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/546","source":"cve@mitre.org"},{"url":"http://www.cert.org/advisories/CA-1993-13.html","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["US Government Resource"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/546","source":"af854a3a-2127-422b-91ae-364da2661108"}]}},