PT-1999-1769 · Acushop · Acushop Salesbuilder

Publicado 1999-07-30 · Atualizado 2016-10-18 · CVE-1999-1536

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: AcuShop Salesbuilder (affected versions not specified)

Description: The issue concerns the .sbstart startup script in AcuShop Salesbuilder, which has world-writable permissions. This allows local users to escalate their privileges by appending malicious commands to the file.

Recommendations: For all affected versions, consider changing the permissions of the .sbstart startup script to prevent world-writable access, thereby restricting the ability of local users to modify the file and gain elevated privileges.

Correção

Identificadores relacionados

CVE-1999-1536

Produtos afetados

Acushop Salesbuilder

Referências · 4

• http://marc.info/?l=bugtraq&m=93347785827287&w=2 · Nota
• http://osvdb.org/13557 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1536 · Nota de Segurança
• http://securityfocus.com/bid/560 · Aviso do Fabricante