PT-1999-1708 · Slackware · Slackware

Publicado 1999-01-02 · Atualizado 2016-10-18 · CVE-1999-1422

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Slackware versions 3.4 and possibly other versions

Description: The default configuration of Slackware includes the current directory in the PATH environmental variable. This could allow local users to create Trojan horse programs that are inadvertently executed by other users.

Recommendations: For Slackware version 3.4, remove the current directory from the PATH environmental variable to prevent the execution of Trojan horse programs. For other possibly affected versions, review the PATH environmental variable configuration and remove the current directory if it is included.

Correção

Identificadores relacionados

CVE-1999-1422

Produtos afetados

Slackware

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-1422 · Nota de Segurança
• http://securityfocus.com/bid/211 · Nota
• http://marc.info/?l=bugtraq&m=91540043023167&w=2 · Nota