Description
SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.
References
- 19990624 Re: Cabletron Spectrum security vulnerability mailing-list
- 19990623 Cabletron Spectrum security vulnerability mailing-list
- 495 vdb-entry