PT-2001-2139 · Arkeia · Arkeia Backup Server

Publicado 2001-07-23 · Atualizado 2017-12-19 · CVE-2001-0988

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Arkeia backup server versions 4.2.8-2 and earlier

Description The issue allows local users to potentially overwrite database files or obtain sensitive information due to world-writable permissions on these files.

Recommendations For Arkeia backup server versions 4.2.8-2 and earlier, consider changing the permissions of the database files to prevent world-writable access until a patch is available. Restrict access to the database files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-0988

Produtos afetados

Arkeia Backup Server

Referências · 4

• https://exchange.xforce.ibmcloud.com/vulnerabilities/6885 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0988 · Nota de Segurança
• http://securityfocus.com/bid/3085 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/bugtraq/2001-07/0521.html · Aviso do Fabricante