PT-1999-1569 · Tin · Tin

Published 1999-11-17 · Updated 2016-10-18 · CVE-1999-1092

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions tin version 1.40

Description The issue allows local users to read passwords from the .inputhistory file due to insecure permissions of the .tin directory created by the software.

Recommendations For tin version 1.40, consider changing the permissions of the .tin directory to secure it and prevent unauthorized access to the .inputhistory file. As a temporary workaround, restrict access to the .inputhistory file until a patch is available.

Fix

Related Identifiers

CVE-1999-1092

Affected Products

Tin

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1092 · Security Note
• http://marc.info/?l=bugtraq&m=94286179032648&w=2 · Note