PT-1994-1021 · Sun · Sunos

Publicado 1994-05-13 · Atualizado 2008-09-05 · CVE-1999-1388

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SunOS versions 4.1.x

Description The issue allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. This is related to the passwd functionality in SunOS.

Recommendations For SunOS versions 4.1.x, avoid using the -F command line argument with the passwd command until a fix is available. As a temporary workaround, consider restricting access to the passwd command to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-1999-1388

Produtos afetados

Sunos

Referências · 4

• 🔥 http://www2.dataguard.no/bugtraq/1994_2/0197.html · Exploit
• http://www2.dataguard.no/bugtraq/1994_2/0207.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-1999-1388 · Nota de Segurança
• http://dataguard.no/bugtraq/1994_4/0755.html · Aviso do Fabricante