PT-1991-1011 · Dec · Dec Ultrix

Published 1991-08-23 · Updated 2008-09-05 · CVE-1999-1415

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DEC ULTRIX versions prior to 4.2

Description A local privilege escalation issue exists due to a problem in the /usr/bin/mail executable. This allows local users to gain elevated privileges.

Recommendations For DEC ULTRIX versions prior to 4.2, update to version 4.2 or later to resolve the issue.

Fix

Related Identifiers

CVE-1999-1415

Affected Products

Dec Ultrix

References · 3

• http://cert.org/advisories/CA-91.13.Ultrix.mail.vulnerability · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-1415 · Security Note
• http://securityfocus.com/bid/27 · Note