PT-1998-1130 · Cops · Cops

Publicado 1998-06-26 · Atualizado 2016-10-18 · CVE-1999-1036

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions COPS version 1.04

Description The issue allows local users to overwrite or create arbitrary files via a symlink attack on temporary files in (1) res diff, (2) ca.src, and (3) mail.chk.

Recommendations For version 1.04, consider restricting access to the temporary files res diff, ca.src, and mail.chk to prevent a symlink attack until a patch is available.

Correção

Identificadores relacionados

CVE-1999-1036

Produtos afetados

Cops

Referências · 2

• http://marc.info/?l=bugtraq&m=90221103125976&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1036 · Nota de Segurança