PT-1993-1007 · Novell · Novell Netware

Publicado 1993-09-16 · Atualizado 2017-10-10 · CVE-1999-1215

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell Netware versions 4.0 through 4.01

Description The issue allows local users to potentially gain privileges due to the temporary writing of user name and password information to disk by the LOGIN.EXE program.

Recommendations For Novell Netware versions 4.0 through 4.01, consider restricting access to sensitive areas of the system to minimize the risk of exploitation until a fix is available.

Correção

Identificadores relacionados

CVE-1999-1215

Produtos afetados

Novell Netware

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1215 · Nota de Segurança
• http://ciac.llnl.gov/ciac/bulletins/d-21.shtml · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/545 · Nota
• http://cert.org/advisories/CA-1993-12.html · Correção