PT-1999-1535 · Cabletron · Spectroserver+1

Published 1999-06-23 · Updated 2016-10-18 · CVE-1999-1019

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cabletron Spectrum Enterprise Manager version 5.0

Description The issue concerns insecure permissions in the directory tree installed by SpectroSERVER, allowing local users to replace a privileged executable with a Trojan horse. This could lead to a root or Administrator compromise.

Recommendations For Cabletron Spectrum Enterprise Manager version 5.0, consider changing the permissions of the directory tree installed by SpectroSERVER to prevent local users from modifying the privileged executable processd. As a temporary workaround, restrict access to the processd executable until a proper fix is applied.

Fix

Related Identifiers

CVE-1999-1019

Affected Products

Cabletron Spectrum Enterprise Manager

Spectroserver

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1019 · Security Note
• http://securityfocus.com/bid/495 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=93024398513475&w=2 · Note
• http://marc.info/?l=bugtraq&m=93024398713491&w=2 · Note