PT-1998-1206 · Red Hat · Red Hat

Published 1998-03-09 · Updated 2016-10-18 · CVE-1999-1407

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Linux 5

Description The ifdhcpc-done script, used for configuring DHCP, contains a flaw that allows local users to append text to arbitrary files. This is achieved through a symlink attack on the dhcplog file.

Recommendations For Red Hat Linux 5, consider restricting access to the ifdhcpc-done script until a patch is available, or apply a configuration change to prevent the script from writing to arbitrary files.

Fix

Related Identifiers

CVE-1999-1407

Affected Products

Red Hat

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1407 · Security Note
• http://redhat.com/support/errata/rh50-errata-general.html#initscripts · Note
• http://iss.net/security_center/static/7294.php · Note
• http://securityfocus.com/bid/368 · Note
• http://marc.info/?l=bugtraq&m=88950856416985&w=2 · Note