PT-1998-1206 · Red Hat · Red Hat

Publicado 1998-03-09 · Atualizado 2016-10-18 · CVE-1999-1407

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Linux 5

Description The ifdhcpc-done script, used for configuring DHCP, contains a flaw that allows local users to append text to arbitrary files. This is achieved through a symlink attack on the dhcplog file.

Recommendations For Red Hat Linux 5, consider restricting access to the ifdhcpc-done script until a patch is available, or apply a configuration change to prevent the script from writing to arbitrary files.

Correção

Identificadores relacionados

CVE-1999-1407

Produtos afetados

Red Hat

Referências · 5

• http://redhat.com/support/errata/rh50-errata-general.html#initscripts · Nota
• http://iss.net/security_center/static/7294.php · Nota
• http://securityfocus.com/bid/368 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1407 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=88950856416985&w=2 · Nota