PT-1999-1350 · Isconf · Inn

Publicado 1999-05-11 · Atualizado 2008-09-09 · CVE-1999-0785

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions INN (affected versions not specified)

Description The issue allows local users to gain root privileges by exploiting the pathrun parameter in the inn.conf file.

Recommendations For all affected versions, consider restricting access to the inn.conf file to prevent unauthorized modifications to the pathrun parameter until a patch is available. As a temporary workaround, review and monitor the inn.conf file for any suspicious changes.

Correção

Identificadores relacionados

CVE-1999-0785

Produtos afetados

Inn

Referências · 2

• http://securityfocus.com/bid/254 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-0785 · Nota de Segurança