Lucene search

[email protected]CVE-1999-0754

HistoryMay 11, 1999 - 4:00 a.m.

CVE-1999-0754

1999-05-1104:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-1999-0754

inn inndstart

privilege escalation

innconf variable

nvd

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.3%

JSON

The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.

CPENameOperatorVersion
isc:innisc inneq*

CPE	Name	Operator	Version
isc:inn	isc inn	eq	*

References

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-1999-011.0.txt

www.redhat.com/corp/support/errata/inn99_05_22.html

www.securityfocus.com/bid/255

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.004 Low

EPSS

Percentile

74.3%

JSON