CVE-1999-0411

Name of the Vulnerable Software and Affected Versions SCO OpenServer Enterprise System version 5.0.4p

Description The issue concerns several startup scripts in the system, including S84rpcinit, S95nis, S85tcp, and S89nfs, which are susceptible to a symlink attack. This allows a local user to potentially gain root access.

Recommendations For SCO OpenServer Enterprise System version 5.0.4p, consider restricting access to the vulnerable startup scripts until a patch is available. As a temporary workaround, disabling the execution of these scripts can help minimize the risk of exploitation.