Caldera Open管理系统漏洞

漏洞信息详情

Caldera Open管理系统漏洞

• CNNVD编号：CNNVD-199904-037
• 危害等级： 低危
  
  
• CVE编号：
  CVE-1999-0712
  
• 漏洞类型：
  
  
  配置错误
  
• 发布时间：
  
  1999-04-27
  
• 威胁类型：
  
  
  本地
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  caldera
• 漏洞来源：
  This advisory was …

Caldera Open Administration System (COAS)存在一个漏洞，允许/etc/shadow密码文件全域可读。

The proper solution is to upgrade to the coas-1.0-8 package. If /etc/shadow is world-readable, this is fixed with
chmod 600 /etc/shadow
The upgrade packages can be found on Caldera’s FTP site at:
ftp://ftp.calderasystems.com/pub/OpenLinux/updates/2.2/current/RPMS/
The corresponding source code package can be found at:
ftp://ftp.calderaystems.com/pub/OpenLinux/updates/2.2/current/SRPMS

Vulnerable software and versionsConfiguration 1OR* cpe:/a:caldera:coas:1.0.5* cpe:/a:caldera:coas:1.0.6* cpe:/a:caldera:coas:1.0.7Configuration 2OR* cpe:/o:caldera:openlinux:2.2* Denotes Vulnerable Software* Changes related to vulnerability configurations

Technical DetailsVulnerability Type (View All)
CVE Standard Vulnerability Entry:http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-1999-0712