PT-1998-1229 · Ibm · Aix

Publicado 1998-06-11 · Atualizado 2008-09-05 · CVE-1999-1480

Positive Technologies (AI Summary)

CVSS v2.0

1.2

Baixa

Vetor base

AV:L/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions AIX version 4.3

Description The issue allows local users to create or modify files via a symlink attack, exploiting the acledit and aclput functions in AIX.

Recommendations For AIX version 4.3, consider restricting access to the acledit and aclput functions to minimize the risk of exploitation. As a temporary workaround, limit the ability of local users to create or modify files using these functions until a patch is available.

Correção

Identificadores relacionados

CVE-1999-1480

Produtos afetados

Aix

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1480 · Nota de Segurança
• http://securityfocus.com/bid/429 · Aviso do Fabricante