PT-1997-1184 · Gnu · Sort

Publicado 1997-10-06 · Atualizado 2016-10-18 · CVE-1999-1095

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions sort (affected versions not specified)

Description The issue allows local users to modify arbitrary files that are writable by the user running sort, as it creates temporary files and follows symbolic links. This is observed in programs such as updatedb that use sort.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1095

Produtos afetados

Sort

Referências · 4

• http://marc.info/?l=bugtraq&m=88886870129518&w=2 · Nota
• http://marc.info/?l=bugtraq&m=88890116304676&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1095 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=87619953510834&w=2 · Nota