SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.

Vulnerability in login in SCO UNIX 4.2 and earlier allows local users to gain root access.

Unspecified vulnerability in ptchmod in SCO UNIX 4.2 and earlier allows local users to gain root access.

Vulnerability in "at" program in SCO UNIX 4.2 and earlier allows local users to gain root access.

Vulnerability in prwarn in SCO UNIX 4.2 and earlier allows local users to gain root access.

Buffer overflow in mscreen on SCO OpenServer 5.0 and SCO UNIX 3.2v4 allows a local user to gain root access via (1) a long TERM environmental variable and (2) a long entry in the .mscreenrc file.

Vulnerability in passwd in SCO UNIX 4.0 and earlier allows attackers to cause a denial of service by preventing users from being able to log into the system.

Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.

DNS cache poisoning via BIND, by predictable query IDs.

Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.