PT-1996-1061 · Transarc+1 · Transarc Dce Distributed File System+1

Publicado 1996-09-17 · Atualizado 2017-12-19 · CVE-1999-1295

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Transarc DCE Distributed File System (DFS) version 1.1 for Solaris 2.4 and 2.5

Description The issue arises from the improper initialization of the grouplist for users who are part of a large number of groups. This could potentially allow such users to access resources protected by DFS that they should not have access to.

Recommendations For Transarc DCE Distributed File System (DFS) version 1.1 on Solaris 2.4 and 2.5, consider restricting access to sensitive resources until a proper fix is applied to ensure grouplist initialization is handled correctly for users with multiple group memberships. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1295

Produtos afetados

Solaris

Transarc Dce Distributed File System

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1295 · Nota de Segurança
• http://cert.org/vendor_bulletins/VB-96.16.transarc · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7154 · Nota