PT-1994-1023 · Ibm · Dpsexec+2

Published 1994-07-20 · Updated 2008-09-10 · CVE-1999-1552

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions dpsexec (DPS Server) versions prior to 3.2.5 in IBM AIX

Description The issue is related to a privilege checking problem in dpsexec when running under XDM in IBM AIX. This allows local users to overwrite arbitrary files and gain privileges.

Recommendations For versions prior to 3.2.5 in IBM AIX, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1552

Affected Products

Aix

Xdm

Dpsexec

References · 3

• http://securityfocus.com/bid/358 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1552 · Security Note
• http://lists.insecure.org/lists/bugtraq/1994/Jul/0038.html · Note