Lucene search

[email protected]CVE-1999-1552

HistoryJul 20, 1994 - 4:00 a.m.

CVE-1999-1552

1994-07-2004:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

ibm aix

dpsexec

privilege escalation

cve-1999-1552

local exploitation

file overwriting.

7.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.3%

JSON

dpsexec (DPS Server) when running under XDM in IBM AIX 3.2.5 and earlier does not properly check privileges, which allows local users to overwrite arbitrary files and gain privileges.

CPENameOperatorVersion
ibm:aixibm aixeq3.2.4
ibm:aixibm aixeq3.1
ibm:aixibm aixle3.2.5
ibm:aixibm aixeq3.2

CPE	Name	Operator	Version
ibm:aix	ibm aix	eq	3.2.4
ibm:aix	ibm aix	eq	3.1
ibm:aix	ibm aix	le	3.2.5
ibm:aix	ibm aix	eq	3.2

References

lists.insecure.org/lists/bugtraq/1994/Jul/0038.html

www.securityfocus.com/bid/358

7.2 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.0004 Low

EPSS

Percentile

14.3%

JSON