PT-1997-1221 · Ipass · Ipass Roamserver

Published 1997-12-29 · Updated 2017-12-19 · CVE-1999-1274

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions iPass RoamServer version 3.1

Description The issue allows for the creation of temporary files with world-writable permissions.

Recommendations For iPass RoamServer version 3.1, consider restricting access to the temporary files created by the software to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1274

Affected Products

Ipass Roamserver

References · 3

• http://securityfocus.com/archive/1/8307 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-1999-1274 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1625 · Note