CVE-1999-0961
Current Description
HPUX sysdiag allows local users to gain root privileges via a symlink attack during log file creation.
Basic Data
| Published | September 21, 1996 |
|---|
| Last Modified | October 18, 2016 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | NVD-CWE-Other |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:L/AC:H/Au:N/C:C/I:C/A:C |
|---|
| CVSS 2 - Access Vector | LOCAL |
|---|
| CVSS 2 - Access Complexity | HIGH |
|---|
| CVSS 2 - Authentication | NONE |
|---|
| CVSS 2 - Confidentiality Impact | COMPLETE |
|---|
| CVSS 2 - Availability Impact | COMPLETE |
|---|
| CVSS 2 - Base Score | 6.2 |
|---|
| Severity | MEDIUM |
|---|
| Exploitability Score | 1.9 |
|---|
| Impact Score | 10.0 |
|---|
| Obtain All Privilege | true |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | false |
|---|
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
| Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
|---|
| 2.3 | OS | Hp | Hp-ux | 9.04 | * | * | * | * | * | * | * | | | | |
| 2.3 | OS | Hp | Hp-ux | 9.05 | * | * | * | * | * | * | * | | | | |
Vulnerable Software List
| Vendor | Product | Versions |
| Hp
|
Hp-ux |
9.04, 9.05 |
References
| Name | Source | URL | Tags |
|---|
| 19960921 Vunerability in HP sysdiag ? | http://marc.info/?l=bugtraq&m=87602167419906&w=2 | BUGTRAQ | |
Follow @discotekdotca