PT-1998-1150 · At&T+1 · Korn Shell+1

Publicado 1998-04-08 · Atualizado 2017-10-10 · CVE-1999-1114

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Korn Shell (ksh) versions prior to the fixed version on IRIX 6.x and earlier

Description A buffer overflow issue in the suid exec program of Korn Shell (ksh) allows local users to gain root privileges. This issue may affect other operating systems besides IRIX 6.x and earlier.

Recommendations For Korn Shell (ksh) on IRIX 6.x and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-1999-1114

Produtos afetados

Irix

Korn Shell

Referências · 7

• 🔥 http://securityfocus.com/bid/467 · Exploit
• 🔥 https://exploit-db.com/exploits/19353 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/2100 · Nota
• ftp://ftp.auscert.org.au/pub/auscert/advisory/AA-96.17.suid_exec.vul · Nota
• ftp://patches.sgi.com/support/free/security/advisories/19980405-01-I · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1114 · Nota de Segurança
• http://ciac.llnl.gov/ciac/bulletins/h-15a.shtml · Aviso do Fabricante