PT-1991-1014 · Hewlett Packard · Apollo Domain Os

Publicado 1991-12-18 · Atualizado 2017-12-19 · CVE-1999-1493

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hewlett Packard Apollo Domain OS versions SR10 through SR10.3

Description The issue allows remote attackers to gain root privileges due to insecure system calls. Specifically, the problem involves the pad $dm cmd and pad $def pfk() function names. This enables unauthorized access to the system.

Recommendations For versions SR10 through SR10.3, as a temporary workaround, consider disabling the pad $dm cmd and pad $def pfk() functions until a patch is available. Restrict access to these functions to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1493

Produtos afetados

Apollo Domain Os

Referências · 4

• http://securityfocus.com/bid/34 · Nota
• http://cert.org/advisories/CA-1991-23.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-1999-1493 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7158 · Nota