PT-1998-1207 · Netbsd · At

Publicado 1998-07-03 · Atualizado 2016-10-18 · CVE-1999-1409

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions at program in IRIX version 6.2 at program in NetBSD versions 1.3.2 and earlier

Description The issue allows local users to read portions of arbitrary files by submitting the file to at with the -f argument. This generates error messages that at sends to the user via e-mail.

Recommendations For IRIX version 6.2, consider restricting access to the at program to minimize the risk of exploitation. For NetBSD versions 1.3.2 and earlier, consider disabling the at program until a fix is available. As a temporary workaround, avoid using the -f argument in the at program to prevent the generation of error messages that could reveal sensitive information.

Exploit

Correção

Identificadores relacionados

CVE-1999-1409

Produtos afetados

At

Referências · 7

• 🔥 https://exploit-db.com/exploits/19261 · Exploit
• 🔥 http://securityfocus.com/bid/331 · Exploit
• http://shmoo.com/mail/bugtraq/jul98/msg00064.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=90233906612929&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1409 · Nota de Segurança
• ftp://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA1998-004.txt.asc · Nota
• http://iss.net/security_center/static/7577.php · Nota