PT-1999-1569 · Tin · Tin

Publicado 1999-11-17 · Atualizado 2016-10-18 · CVE-1999-1092

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions tin version 1.40

Description The issue allows local users to read passwords from the .inputhistory file due to insecure permissions of the .tin directory created by the software.

Recommendations For tin version 1.40, consider changing the permissions of the .tin directory to secure it and prevent unauthorized access to the .inputhistory file. As a temporary workaround, restrict access to the .inputhistory file until a patch is available.

Correção

Identificadores relacionados

CVE-1999-1092

Produtos afetados

Tin

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1092 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=94286179032648&w=2 · Nota