CVE-1999-0988: High severity SCO UnixWare vulnerability
UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
xinuos/unixware/pkgtransfrom your environment.If pkgtrans is not required, uninstall the pkgtrans utility from affected systems to remove the attack surface.
- Configuration
Change the pkgtrans binary ownership to root and remove execute permission for unprivileged users (e.g., set mode to disallow execution by others) and remove any setuid/setgid bits so local unprivileged users cannot run pkgtrans.
UnixWare pkgtrans executable access / ownership / setuid = restrict execution to root/administrators; remove setuid/setgid if present - Compensating control
Until a vendor fix is available or pkgtrans is removed, restrict which local accounts can access systems with pkgtrans, tighten directory permissions on paths used by pkgtrans to prevent unprivileged users creating symlinks, and enable monitoring/alerting for unexpected symlink creation or pkgtrans invocations.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0988?
CVE-1999-0988 is classified as a local privilege escalation vulnerability.
How do I fix CVE-1999-0988?
To fix CVE-1999-0988, users should upgrade to the latest patched version of UnixWare.
Who is affected by CVE-1999-0988?
CVE-1999-0988 affects local users on Xinuos UnixWare versions 2.0, 2.0.3, 2.1, 7.0, 7.0.1, 7.1, 7.1.1, and 7.1.16.
What type of attack leverages CVE-1999-0988?
CVE-1999-0988 can be exploited through a symlink attack.
Can remote users exploit CVE-1999-0988?
No, CVE-1999-0988 can only be exploited by local users.