PT-2001-2139 · Arkeia · Arkeia Backup Server

Published 2001-07-23 · Updated 2017-12-19 · CVE-2001-0988

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Arkeia backup server versions 4.2.8-2 and earlier

Description The issue allows local users to potentially overwrite database files or obtain sensitive information due to world-writable permissions on these files.

Recommendations For Arkeia backup server versions 4.2.8-2 and earlier, consider changing the permissions of the database files to prevent world-writable access until a patch is available. Restrict access to the database files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-0988

Affected Products

Arkeia Backup Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2001-0988 · Security Note
• http://securityfocus.com/bid/3085 · Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2001-07/0521.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6885 · Note