PT-1990-1003 · At&T+1 · Korn Shell+1

Published 1990-12-31 · Updated 2025-04-03 · CVE-1999-1115

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Apollo Domain/OS versions sr10.2 through sr10.3 beta

Description The issue is related to the /etc/suid exec program and the Korn Shell (ksh) in HP Apollo Domain/OS.

Recommendations For HP Apollo Domain/OS versions sr10.2 through sr10.3 beta, consider restricting access to the /etc/suid exec program until a fix is available. As a temporary workaround, avoid using the Korn Shell (ksh) for sensitive operations.

Fix

Related Identifiers

CVE-1999-1115

Affected Products

Hp Apollo Domain/Os

Korn Shell

References · 6

• http://cert.org/advisories/CA-1990-04.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-1115 · Security Note
• http://ciac.org/ciac/bulletins/a-30.shtml · Note
• http://iss.net/security_center/static/6721.php · Note
• http://securityfocus.com/bid/7 · Note
• https://t.me/cvenotify/117494 · Telegram Post