CVE-1999-1103: Medium severity digital osf 1 vulnerability
dxconsole in DEC OSF/1 3.2C and earlier allows local users to read arbitrary files by specifying the file with the -file parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
DEC OSF/1 dxconsolefrom your environment.Uninstall dxconsole from affected systems if it is not required.
- Configuration
Change ownership and file permissions of the dxconsole binary so that only administrative/trusted accounts can execute it (for example: chown root /path/to/dxconsole; chmod 700 /path/to/dxconsole).
dxconsole (DEC OSF/1) file permissions / executable access = restrict to administrative users - Compensating control
Restrict local user access to hosts running dxconsole — remove shell/login access for untrusted accounts, enforce filesystem ACLs or mandatory access controls, or isolate the host on the network so unprivileged local users cannot exploit the vulnerability.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1103?
CVE-1999-1103 is considered a medium severity vulnerability due to its potential to allow local users to access sensitive files.
How do I fix CVE-1999-1103?
To fix CVE-1999-1103, update your DEC OSF/1 system to a version later than 3.2C that addresses this vulnerability.
What is the impact of CVE-1999-1103?
The impact of CVE-1999-1103 allows local users to read arbitrary files, which can lead to unauthorized information disclosure.
Who is affected by CVE-1999-1103?
CVE-1999-1103 affects local users running DEC OSF/1 version 3.2C and earlier.
Is CVE-1999-1103 a remote or local vulnerability?
CVE-1999-1103 is a local vulnerability that can only be exploited by users with local access to the system.