Is CVE-1999-1252 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-1999-1252 being exploited in the wild.

How severe is CVE-1999-1252?

High severity, with a CVSS score of 7.2, published 4 September 1996.

Is there a fix for CVE-1999-1252?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-1999-1252 attacked?

It is attacked with local access, in an operating system.

Am I affected by CVE-1999-1252?

Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-1999-1252: SCO UnixWare privilege escalation via system call

CVE-1999-1252 · Severity: high · CVSS 7.2 · Published 1996-09-04

A vulnerability in the SCO UnixWare operating system allows local users to bypass security restrictions. By exploiting a flaw in a specific system call, an attacker with basic access to the system can read or modify any file and gain full administrative (root) control. This could lead to a complete compromise of the server and any data stored on it.

Quick answers

Is CVE-1999-1252 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-1999-1252 being exploited in the wild.
How severe is CVE-1999-1252?: High severity, with a CVSS score of 7.2, published 4 September 1996.
Which products and versions are affected?: SCO UnixWare 2.0.x, 2.1.0.
Is there a fix for CVE-1999-1252?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-1999-1252 attacked?: It is attacked with local access, in an operating system.
Am I affected by CVE-1999-1252?: Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A vulnerability exists in a specific system call within the SCO UnixWare kernel (versions 2.0.x and 2.1.0). The flaw allows a local, unprivileged user to bypass standard file system permissions. By successfully exploiting this system call, an attacker can read or write to arbitrary files on the system, leading to a full privilege escalation to root. The attack requires local access to the system but no special privileges. Patch information was historically available via SCO security bulletins (SB.96:02a).

Affected products

SCO UnixWare 2.0.x, 2.1.0

Timeline

1996-09-04: disclosed: Initial publication date
1996-09-04: advisory: NVD publication date

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.