PT-1999-1285 · Openbsd+1 · Openbsd+1

Published 1999-08-03 · Updated 2008-09-09 · CVE-1999-0703

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions OpenBSD (affected versions not specified) BSDI (affected versions not specified) Other Unix operating systems (affected versions not specified)

Description The issue concerns Unix operating systems, including OpenBSD and BSDI, which allow users to set certain flags on character and block devices.

Recommendations For OpenBSD, restrict access to the chflags and fchflags functions until a patch is available. For BSDI, restrict access to the chflags and fchflags functions until a patch is available. For other Unix operating systems, restrict access to the chflags and fchflags functions until a patch is available.

Fix

Related Identifiers

CVE-1999-0703

Affected Products

Bsdi

Openbsd

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0703 · Security Note
• http://ciac.org/ciac/bulletins/j-066.shtml · Note