PT-1999-1350 · Isconf · Inn

Published 1999-05-11 · Updated 2008-09-09 · CVE-1999-0785

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions INN (affected versions not specified)

Description The issue allows local users to gain root privileges by exploiting the pathrun parameter in the inn.conf file.

Recommendations For all affected versions, consider restricting access to the inn.conf file to prevent unauthorized modifications to the pathrun parameter until a patch is available. As a temporary workaround, review and monitor the inn.conf file for any suspicious changes.

Fix

Related Identifiers

CVE-1999-0785

Affected Products

Inn

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0785 · Security Note
• http://securityfocus.com/bid/254 · Note