PT-1997-1242 · Oracle · Solaris Solstice Adminsuite

Publicado 1997-11-10 · Atualizado 2008-09-05 · CVE-1999-1427

Positive Technologies (AI Summary)

CVSS v2.0

6.2

Média

Vetor base

AV:L/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Solaris Solstice AdminSuite versions 2.1 through 2.2

Description The issue allows local users to gain root privileges due to insecure creation of lock files.

Recommendations For versions 2.1 and 2.2, consider restricting access to the lock file creation mechanism as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-1999-1427

Produtos afetados

Solaris Solstice Adminsuite

Referências · 3

• http://securityfocus.com/bid/208 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1427 · Nota de Segurança
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/145 · Aviso do Fabricante