PT-1998-1196 · Sun · Xview+2

Publicado 1998-07-15 · Atualizado 2018-10-30 · CVE-1999-1297

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions OpenWindows versions 3.0 XView versions 3.0 in SunOS versions 4.1.4 and earlier

Description The issue allows attackers with physical access to the system to display unechoed characters, such as those from password prompts, via the L2/AGAIN key.

Recommendations For OpenWindows version 3.0, restrict physical access to the system to minimize the risk of exploitation. For XView version 3.0 in SunOS versions 4.1.4 and earlier, consider disabling the use of the L2/AGAIN key as a temporary workaround until a fix is available.

Correção

Identificadores relacionados

CVE-1999-1297

Produtos afetados

Openwindows

Sunos

Xview

Referências · 3

• https://exchange.xforce.ibmcloud.com/vulnerabilities/7482 · Nota
• http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fpatches%2F100452&zone_32=10045%2A%20 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-1999-1297 · Nota de Segurança