PT-1991-1014 · Hewlett Packard · Apollo Domain Os

Published 1991-12-18 · Updated 2017-12-19 · CVE-1999-1493

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hewlett Packard Apollo Domain OS versions SR10 through SR10.3

Description The issue allows remote attackers to gain root privileges due to insecure system calls. Specifically, the problem involves the pad $dm cmd and pad $def pfk() function names. This enables unauthorized access to the system.

Recommendations For versions SR10 through SR10.3, as a temporary workaround, consider disabling the pad $dm cmd and pad $def pfk() functions until a patch is available. Restrict access to these functions to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1493

Affected Products

Apollo Domain Os

References · 4

• http://cert.org/advisories/CA-1991-23.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-1493 · Security Note
• http://securityfocus.com/bid/34 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7158 · Note