CVE-1999-0852: High severity IBM WebSphere Application Server Feature Pack for Web Services vulnerability
IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /usr/bin.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Ensure the deinstallation script and any related data files installed under /usr/bin are owned by root (or an appropriate privileged account) and remove write permissions for non-privileged local users so they cannot modify these files.
IBM WebSphere Application Server Feature Pack for Web Services permissions on deinstallation script and its data files in /usr/bin = owned by root and not writable by non-privileged local users - Operational
Audit /usr/bin for the deinstallation script and related data files to detect any unauthorized modifications; restore original files from vendor media or reinstall the package if tampering is found and verify file ownership and permissions after remediation.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0852?
CVE-1999-0852 is classified as a moderate severity vulnerability due to its impact on local user permissions.
How do I fix CVE-1999-0852?
To fix CVE-1999-0852, ensure proper file permissions are set for the deinstallation scripts and data files in /usr/bin.
What type of vulnerability is CVE-1999-0852?
CVE-1999-0852 is a local privilege escalation vulnerability that allows unauthorized modification of scripts.
Who is affected by CVE-1999-0852?
CVE-1999-0852 affects IBM WebSphere Application Server version 3.0.
Can CVE-1999-0852 be exploited remotely?
CVE-1999-0852 is not exploitable remotely; it requires local access to the affected system.