PT-1999-1769 · Acushop · Acushop Salesbuilder

Published 1999-07-30 · Updated 2016-10-18 · CVE-1999-1536

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: AcuShop Salesbuilder (affected versions not specified)

Description: The issue concerns the .sbstart startup script in AcuShop Salesbuilder, which has world-writable permissions. This allows local users to escalate their privileges by appending malicious commands to the file.

Recommendations: For all affected versions, consider changing the permissions of the .sbstart startup script to prevent world-writable access, thereby restricting the ability of local users to modify the file and gain elevated privileges.

Fix

Related Identifiers

CVE-1999-1536

Affected Products

Acushop Salesbuilder

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1536 · Security Note
• http://securityfocus.com/bid/560 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=93347785827287&w=2 · Note
• http://osvdb.org/13557 · Note