SCO UNIX System V/386 Release 3.2, and other SCO products, installs the home directories (1) /tmp for the dos user, and (2) /usr/tmp for the asg user, which allows other users to gain access to those accounts since /tmp and /usr/tmp are world-writable.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Open_desktop | Sco | 1.0 (including) | 1.0 (including) |
| Open_desktop | Sco | 2.0 (including) | 2.0 (including) |
| Open_desktop | Sco | 3.0 (including) | 3.0 (including) |
| Open_desktop_lite | Sco | 3.0 (including) | 3.0 (including) |
| Openserver | Sco | 3.0 (including) | 3.0 (including) |
| Unix | Sco | system_v386_3.2_operating_system (including) | system_v386_3.2_operating_system (including) |
| Unix | Sco | system_v386_3.2_operating_system_2.0 (including) | system_v386_3.2_operating_system_2.0 (including) |
| Unix | Sco | system_v386_3.2_operating_system_4.0 (including) | system_v386_3.2_operating_system_4.0 (including) |
| Unix | Sco | system_v386_3.2_operating_system_4.x (including) | system_v386_3.2_operating_system_4.x (including) |