PT-2001-1099 · Netscape+1 · Netscape Proxy Server+3

Publicado 2001-03-12 · Atualizado 2008-09-05 · CVE-2000-0308

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Netscape FastTrack Server versions 2.x Netscape Enterprise Server version 2.0 Netscape Proxy Server version 2.5

Description The issue is related to insecure file permissions, which can allow an attacker to gain root privileges. This affects systems running on SCO UnixWare 7.0.x and 2.1.3.

Recommendations For Netscape FastTrack Server versions 2.x, update the file permissions to secure them. For Netscape Enterprise Server version 2.0, adjust the file permissions to prevent unauthorized access. For Netscape Proxy Server version 2.5, modify the file permissions to restrict access and prevent privilege escalation.

Correção

Identificadores relacionados

CVE-2000-0308

Produtos afetados

Netscape Enterprise Server

Netscape Fasttrack Server

Netscape Proxy Server

Sco Unixware

Referências · 3

• ftp://ftp.sco.com/SSE/security_bulletins/SB-99.08a · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2000-0308 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2000-0308 · Nota