# CVE-1999-1252: SCO UnixWare privilege escalation via system call

Source: https://junglewise.ai/threats/cve-1999-1252-sco-unixware-privilege-escalation-via-system-call  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 1996-09-04. Updated: 2026-05-10  
License: CC BY 4.0 with a link back

CVE-1999-1252 · Severity: high · CVSS 7.2 · Published 1996-09-04

A vulnerability in the SCO UnixWare operating system allows local users to bypass security restrictions. By exploiting a flaw in a specific system call, an attacker with basic access to the system can read or modify any file and gain full administrative (root) control. This could lead to a complete compromise of the server and any data stored on it.

## Quick answers

**Is CVE-1999-1252 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-1999-1252 being exploited in the wild.

**How severe is CVE-1999-1252?** High severity, with a CVSS score of 7.2, published 4 September 1996.

**Which products and versions are affected?** SCO UnixWare 2.0.x, 2.1.0.

**Is there a fix for CVE-1999-1252?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-1999-1252 attacked?** It is attacked with local access, in an operating system.

**Am I affected by CVE-1999-1252?** Check whether anything you run is named in the advisory. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A vulnerability exists in a specific system call within the SCO UnixWare kernel (versions 2.0.x and 2.1.0). The flaw allows a local, unprivileged user to bypass standard file system permissions. By successfully exploiting this system call, an attacker can read or write to arbitrary files on the system, leading to a full privilege escalation to root. The attack requires local access to the system but no special privileges. Patch information was historically available via SCO security bulletins (SB.96:02a).

## Affected products

- SCO UnixWare 2.0.x, 2.1.0

## Timeline

- 1996-09-04: disclosed: Initial publication date
- 1996-09-04: advisory: NVD publication date

## References

- [http://www.cert.org/vendor_bulletins/VB-96.15.sco](http://www.cert.org/vendor_bulletins/VB-96.15.sco)
- [https://exchange.xforce.ibmcloud.com/vulnerabilities/1966](https://exchange.xforce.ibmcloud.com/vulnerabilities/1966)