PT-1999-1535 · Cabletron · Spectroserver+1

Publicado 1999-06-23 · Atualizado 2016-10-18 · CVE-1999-1019

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cabletron Spectrum Enterprise Manager version 5.0

Description The issue concerns insecure permissions in the directory tree installed by SpectroSERVER, allowing local users to replace a privileged executable with a Trojan horse. This could lead to a root or Administrator compromise.

Recommendations For Cabletron Spectrum Enterprise Manager version 5.0, consider changing the permissions of the directory tree installed by SpectroSERVER to prevent local users from modifying the privileged executable processd. As a temporary workaround, restrict access to the processd executable until a proper fix is applied.

Correção

Identificadores relacionados

CVE-1999-1019

Produtos afetados

Cabletron Spectrum Enterprise Manager

Spectroserver

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1019 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=93024398513475&w=2 · Nota
• http://securityfocus.com/bid/495 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=93024398713491&w=2 · Nota