PT-1999-1563 · Ibm · Aix

Published 1999-05-06 · Updated 2016-10-18 · CVE-1999-1079

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions AIX version 4.3

Description A local privilege escalation issue exists due to a flaw in the ptrace system call. This allows local users to elevate their privileges by attaching to a setgid program.

Recommendations For AIX version 4.3, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1079

Affected Products

Aix

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-1999-1079 · Security Note
• http://securityfocus.com/bid/439 · Vendor Advisory
• http://www-1.ibm.com/servlet/support/manager?rs=0&rt=0&org=apars&doc=08E0B1A1B85472A1852567C90031BB36 · Note
• http://marc.info/?l=bugtraq&m=93587956513233&w=2 · Note
• http://marc.info/?l=bugtraq&m=92601792420088&w=2 · Note