Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-1999-1325
cve-1999-1325
sas system 5.18
vax/vms
insecure permissions
local user
privilege gain.
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.8%
SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.
Affected configurations
Node
vax_vmssas_systemMatch5.18
| CPE | Name | Operator | Version |
|---|---|---|---|
| vax_vms:sas_system | vax vms sas system | eq | 5.18 |
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
7 High
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.8%
Related for CVE-1999-1325