Lucene search

[email protected]CVE-1999-1244

HistoryApr 15, 1999 - 4:00 a.m.

CVE-1999-1244

1999-04-1504:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ipfilter

cve-1999-1244

local users

file modification

symlink attack.

7.1 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.3%

JSON

IPFilter 3.2.3 through 3.2.10 allows local users to modify arbitrary files via a symlink attack on the saved output file.

CPENameOperatorVersion
darren_reed:ipfilterdarren reed ipfiltereq3.2.8
darren_reed:ipfilterdarren reed ipfiltereq3.2.7
darren_reed:ipfilterdarren reed ipfiltereq3.2.5
darren_reed:ipfilterdarren reed ipfiltereq3.2.4
darren_reed:ipfilterdarren reed ipfiltereq3.2.10
darren_reed:ipfilterdarren reed ipfiltereq3.2.6
darren_reed:ipfilterdarren reed ipfiltereq3.2.9
darren_reed:ipfilterdarren reed ipfiltereq3.2.3

CPE	Name	Operator	Version
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.8
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.7
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.5
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.4
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.10
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.6
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.9
darren_reed:ipfilter	darren reed ipfilter	eq	3.2.3

References

www.securityfocus.com/archive/1/13303

exchange.xforce.ibmcloud.com/vulnerabilities/2087

7.1 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.3%

JSON