CVE-1999-1162: Medium severity sco open desktop vulnerability
Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to systems running SCO Open Desktop / SCO UNIX 4.0 and earlier. Use firewalls, ACLs or network segmentation to limit which IPs can reach authentication services and management interfaces, isolating these hosts from untrusted networks.
- Operational
Identify and inventory all machines running SCO UNIX 4.0 or earlier. Isolate affected systems from production networks until a remediation or migration can be completed.
- Operational
Plan migration of affected systems to a supported operating system or apply vendor-supplied remediation when available. Monitor vendor advisories for any released patches or fixes for the passwd vulnerability and apply them as soon as they are published.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1162?
CVE-1999-1162 is considered a denial of service vulnerability that can severely impact user access.
Which systems are affected by CVE-1999-1162?
CVE-1999-1162 affects SCO UNIX 4.0 and earlier versions as well as SCO Open Desktop versions 1.1 and 2.0.
How do I fix CVE-1999-1162?
To fix CVE-1999-1162, update to a version of SCO UNIX or SCO Open Desktop that is not vulnerable.
What impact does CVE-1999-1162 have on user accounts?
CVE-1999-1162 prevents users from being able to log into the system, effectively blocking access.
Is CVE-1999-1162 still a relevant threat?
While older systems may still be affected, CVE-1999-1162 is less relevant in modern environments due to obsolescence of SCO UNIX.