PT-1998-1198 · Ca+1 · 1Arcserve Backup+1

Publicado 1998-11-12 · Atualizado 2021-04-09 · CVE-1999-1322

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 1ArcServe Backup (affected versions not specified) Inoculan AV client (affected versions not specified)

Description The installation of certain modules creates a log file, exchverify.log, which stores usernames and passwords in plaintext.

Recommendations For 1ArcServe Backup, consider restricting access to the exchverify.log file until a fix is available. For Inoculan AV client, avoid using the affected module for Exchange until the issue is resolved. As a temporary workaround, consider disabling the logging feature that creates the exchverify.log file to prevent plaintext storage of sensitive information.

Correção

Identificadores relacionados

CVE-1999-1322

Produtos afetados

1Arcserve Backup

Inoculan Av Client

Referências · 3

• http://marc.info/?l=ntbugtraq&m=91133714919229&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1322 · Nota de Segurança
• http://marc.info/?l=ntbugtraq&m=91096758513985&w=2 · Nota