CVE-1999-1303: High severity sco open desktop vulnerability
Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Until a vendor patch is available, restrict and harden local access: limit interactive logins to trusted administrative accounts, enforce least privilege, and isolate affected systems from untrusted users (network segmentation or console-only access).
- Operational
Audit local system logs for signs of exploitation of prwarn, verify integrity of root and administrative accounts, and rotate administrative/root credentials if any compromise is suspected.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1303?
CVE-1999-1303 is considered a high severity vulnerability because it allows local users to gain root access.
Who is affected by CVE-1999-1303?
CVE-1999-1303 affects local users of SCO UNIX 4.2 and earlier versions, as well as various SCO Open Desktop and OpenServer systems.
How do I fix CVE-1999-1303?
To mitigate CVE-1999-1303, you should upgrade to a patched version of the SCO UNIX or related operating systems.
What types of systems are vulnerable to CVE-1999-1303?
Systems vulnerable to CVE-1999-1303 include SCO UNIX 4.2 and earlier, as well as versions of SCO Open Desktop and OpenServer.
Is remote access possible through CVE-1999-1303?
CVE-1999-1303 specifically allows local access for users, so remote access is not directly facilitated by this vulnerability.