PT-1996-1051 · Dec · Dec Osf/1

Publicado 1996-04-03 · Atualizado 2008-09-05 · CVE-1999-1103

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DEC OSF/1 versions 3.2C and earlier

Description The issue allows local users to read arbitrary files. This is achieved by specifying the file with the -file parameter in dxconsole.

Recommendations For DEC OSF/1 versions 3.2C and earlier, consider restricting access to the dxconsole utility until a fix is available. As a temporary workaround, avoid using the -file parameter in dxconsole to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-1999-1103

Produtos afetados

Dec Osf/1

Referências · 5

• http://tao.ca/fire/bos/0209.html · Nota
• http://ciac.llnl.gov/ciac/bulletins/g-18.shtml · Aviso do Fabricante
• http://cert.org/vendor_bulletins/VB-96.05.dec · Correção
• http://iss.net/security_center/static/7138.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1103 · Nota de Segurança