ghsa-c5ww-jjpp-2wr5
Vulnerability from github
Published
2022-04-30 18:12
Modified
2022-04-30 18:12
VLAI Severity ?
Details
NetWare NFS mode 1 and 2 implements the "Read Only" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to "Read Only," which NetWare-NFS changes to a setuid root program.
{ "affected": [], "aliases": [ "CVE-1999-1382" ], "database_specific": { "cwe_ids": [], "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "1999-12-31T05:00:00Z", "severity": "HIGH" }, "details": "NetWare NFS mode 1 and 2 implements the \"Read Only\" flag in Unix by changing the ownership of a file to root, which allows local users to gain root privileges by creating a setuid program and setting it to \"Read Only,\" which NetWare-NFS changes to a setuid root program.", "id": "GHSA-c5ww-jjpp-2wr5", "modified": "2022-04-30T18:12:21Z", "published": "2022-04-30T18:12:21Z", "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-1999-1382" }, { "type": "WEB", "url": "http://marc.info/?l=bugtraq\u0026m=88427711321769\u0026w=2" }, { "type": "WEB", "url": "http://marc.info/?l=bugtraq\u0026m=90295697702474\u0026w=2" }, { "type": "WEB", "url": "http://support.novell.com/cgi-bin/search/tidfinder.cgi?2940551" }, { "type": "WEB", "url": "http://www.iss.net/security_center/static/7246.php" } ], "schema_version": "1.4.0", "severity": [] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.
Loading…
Loading…