PT-1996-1051 · Dec · Dec Osf/1

Published 1996-04-03 · Updated 2008-09-05 · CVE-1999-1103

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions DEC OSF/1 versions 3.2C and earlier

Description The issue allows local users to read arbitrary files. This is achieved by specifying the file with the -file parameter in dxconsole.

Recommendations For DEC OSF/1 versions 3.2C and earlier, consider restricting access to the dxconsole utility until a fix is available. As a temporary workaround, avoid using the -file parameter in dxconsole to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-1999-1103

Affected Products

Dec Osf/1

References · 5

• http://ciac.llnl.gov/ciac/bulletins/g-18.shtml · Vendor Advisory
• http://cert.org/vendor_bulletins/VB-96.05.dec · Patch
• https://nvd.nist.gov/vuln/detail/CVE-1999-1103 · Security Note
• http://tao.ca/fire/bos/0209.html · Note
• http://iss.net/security_center/static/7138.php · Note