PT-1998-1203 · Ibm · Ibm/Tivoli Opc Tracker Agent

Publicado 1998-10-02 · Atualizado 2008-09-10 · CVE-1999-1403

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM/Tivoli OPC Tracker Agent version 2 release 1

Description The issue allows local users to disrupt operations and possibly gain privileges by modifying or deleting files due to insecure permissions. The software creates files, directories, and IPC message queues that are world-readable and world-writable.

Recommendations For IBM/Tivoli OPC Tracker Agent version 2 release 1, consider restricting access to the files, directories, and IPC message queues to prevent local users from modifying or deleting them. As a temporary workaround, restrict write permissions to these resources until a fix is available.

Correção

Identificadores relacionados

CVE-1999-1403

Produtos afetados

Ibm/Tivoli Opc Tracker Agent

Referências · 3

• http://securityfocus.com/archive/1/10771 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-1999-1403 · Nota de Segurança
• http://securityfocus.com/bid/382 · Nota