CVE-1999-1304: High severity sco open desktop vulnerability
Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
SCO Open Desktopfrom your environment.If SCO Open Desktop is not required, uninstall the product from affected systems to eliminate the vulnerable login component.
- Remove
Remove
SCO OpenDesktop Litefrom your environment.If SCO OpenDesktop Lite is not required, uninstall the product from affected systems to eliminate the vulnerable login component.
- Remove
Remove
SCO OpenServerfrom your environment.If SCO OpenServer is not required, uninstall the product from affected systems to eliminate the vulnerable login component.
- Remove
Remove
SCO OpenServer Network Systemfrom your environment.If SCO OpenServer Network System is not required, uninstall the product from affected systems to eliminate the vulnerable login component.
- Remove
Remove
UNIXfrom your environment.If the affected UNIX installation is not required, remove or decommission the affected system to eliminate exposure to the vulnerable login component.
- Compensating control
Restrict local interactive login access: limit console/terminal logins to trusted administrators, disable or lock unneeded local accounts, and apply strict local access controls to reduce the risk that local users can exploit the login vulnerability.
- Operational
Audit and monitor for signs of local privilege escalation and unauthorized root activity (review auth and syslogs). If compromise is suspected, isolate the system, investigate, restore from known-good backups or reinstall from trusted media, and change administrative/root credentials.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1304?
CVE-1999-1304 is considered a high severity vulnerability due to its potential to allow local users to gain root access.
How do I fix CVE-1999-1304?
To fix CVE-1999-1304, users should upgrade to a patched version of the affected software that resolves this vulnerability.
Which versions are affected by CVE-1999-1304?
CVE-1999-1304 affects SCO UNIX versions 4.2 and earlier, as well as various SCO Open Desktop and OpenServer products.
What type of vulnerability is CVE-1999-1304?
CVE-1999-1304 is a local privilege escalation vulnerability that allows unauthorized access to root privileges.
Who is impacted by CVE-1999-1304?
Individuals using the affected versions of SCO UNIX and related software are at risk due to CVE-1999-1304.