PT-2004-1421 · Ca · Etrust Inoculateit

L0Om · Publicado 2004-03-18 · Atualizado 2024-02-14 · CVE-2004-0267

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions eTrust InoculateIT for Linux version 6.0

Description The issue allows local users to overwrite arbitrary files via a symlink attack on files in /tmp, specifically through the inoregupdate, uniftest, or unimove scripts.

Recommendations For eTrust InoculateIT for Linux version 6.0, consider restricting access to the inoregupdate, uniftest, and unimove scripts to prevent local users from exploiting the symlink attack vulnerability. As a temporary workaround, restrict write access to sensitive files and directories that could be targeted by the attack.

Correção

Identificadores relacionados

CVE-2004-0267

Produtos afetados

Etrust Inoculateit

Referências · 9

• http://secunia.com/advisories/10833 · Nota
• http://marc.info/?l=bugtraq&m=107635584431518&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0267 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15102 · Nota
• http://osvdb.org/4735 · Nota
• http://excluded.org/advisories/advisory10.txt · Nota
• http://osvdb.org/4856 · Nota
• http://osvdb.org/4855 · Nota
• http://securityfocus.com/bid/9616 · Aviso do Fabricante