PT-1997-1241 · Oracle · Solaris Solstice Adminsuite

Publicado 1997-11-10 · Atualizado 2008-09-05 · CVE-1999-1426

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Solaris Solstice AdminSuite version 2.1

Description The issue allows local users to overwrite arbitrary files because it follows symbolic links when updating an NIS database.

Recommendations For Solaris Solstice AdminSuite version 2.1, consider restricting the update functionality of the NIS database to prevent local users from overwriting arbitrary files until a patch is available.

Correção

Identificadores relacionados

CVE-1999-1426

Produtos afetados

Solaris Solstice Adminsuite

Referências · 3

• http://securityfocus.com/bid/208 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1426 · Nota de Segurança
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145 · Aviso do Fabricante