ID CVE-1999-1536
Summary .sbstart startup script in AcuShop Salesbuilder is world writable, which allows local users to gain privileges by appending commands to the file.
References
Vulnerable Configurations
  • cpe:2.3:a:acushop:salesbuilder:2.6:*:*:*:*:*:*:*
    cpe:2.3:a:acushop:salesbuilder:2.6:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 18-10-2016 - 02:05)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bid 560
bugtraq 19990730 World writable root owned script in SalesBuilder (RedHat 6.0)
osvdb 13557
Last major update 18-10-2016 - 02:05
Published 30-07-1999 - 04:00
Last modified 18-10-2016 - 02:05
Back to Top