s2
--:--:--UTC

Searching APEX

Starting…

  1. Searching Threats, IOCs & Threat Intelligence locally
  2. Querying external providers
  3. Asking AI Forensic Validator
  4. Creating new entry from validated hit

0s elapsed

CVE-1999-1138 high

📛 Threat Title

CVE-1999-1138

Category: vulnerability Published: Source updated: First seen: Last updated: Source: NVD Recent CVEs

Description

SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (3)

  • cve@mitre.org NVD Recent CVEs
  • cve@mitre.org NVD Recent CVEs
  • NVD detail: CVE-1999-1138 NVD Recent CVEs

    SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Remediations (10)

  • web:cvevault.com

    CVE Vault - Search and explore Common Vulnerabilities and Exposures ( CVE ) database. Find security vulnerabilities by CVE ID, vendor, severity, and year. Stay secure with comprehensive CVE information.

  • web:fight.mitre.org

    Mitigations describe the means by which defenders can prevent adversary behaviors. These methods can be technical, procedural, or policy based. The table below lists mitigations from MITRE FiGHT™. Scroll through the table or use the filter to narrow down the information.

  • web:github.com

    Patch for Windows 9x to fix CPU issues. Contribute to JHRobotics/patcher9x development by creating an account on GitHub.

  • web:msrc.microsoft.com

    The Microsoft Security Response Center (MSRC) investigates all reports of security vulnerabilities affecting Microsoft products and services, and provides the information here as part of the ongoing effort to help you manage security risks and help keep your systems protected.

  • web:translate.google.com

    Google's service, offered free of charge, instantly translates words, phrases, and web pages between English and over 100 other languages.

  • web:www.cve.org

    At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  • web:www.manageengine.com

    Patch Details: The name of the patch and the affected products. Patch Details The following patch details are shown: Patch ID: A unique reference ID for every patch Patch Name: The name of the patch Bulletin ID: The Bulletin ID pertaining to this patch MS Knowledge Base: The knowledge base article corresponding to this patch .

  • web:www.nist.gov

    NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

  • web:www.secure.com

    Learn the difference between vulnerability remediation and mitigation , and how a risk-based strategy can strengthen your security posture.

  • web:www.virustotal.com

    VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.