CVE-1999-1126
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco Resource Manager (CRM) 1.0以及之前的版本存在权限许可漏洞。CRM会创建某一带有不安全许可的文件，本地用户可以从以“DPR”开头的(1)swim_swd.log、(2) swim_debug.log、(3) dbi_debug.及(4)临时文件中获得敏感的配置信息，这些配置信息包括用户名、密码和SNMP社区字符串。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-1999-1126
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Cisco Resource Manager (CRM) 1.1 and earlier creates certain files with insecure permissions that allow local users to obtain sensitive configuration information including usernames, passwords, and SNMP community strings, from (1) swim_swd.log, (2) swim_debug.log, (3) dbi_debug.log, and (4) temporary files whose names begin with "DPR_".
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco Resource Manager权限许可漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco Resource Manager (CRM) 1.0以及之前的版本存在权限许可漏洞。CRM会创建某一带有不安全许可的文件，本地用户可以从以“DPR”开头的(1)swim_swd.log、(2) swim_debug.log、(3) dbi_debug.及(4)临时文件中获得敏感的配置信息，这些配置信息包括用户名、密码和SNMP社区字符串。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-1999-1126
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-1999-1126
请登录查看更多情报信息。
Vendor Advisories for CVE-1999-1126 (1)
Other References for CVE-1999-1126 (1)
-
http://ciac.llnl.gov/ciac/bulletins/i-086.shtml third-party-advisory government-resource x_refsource_CIAC
Same Patch Batch · n/a · 2001-09-12 · 393 CVEs total
| CVE-1999-1415 | ULTRIX /usr/bin/mail漏洞 | |
| CVE-1999-1429 | DIT TransferPro设备许可漏洞 | |
| CVE-1999-1428 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1427 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1426 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1425 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1424 | Solaris Solstice AdminSuite漏洞 | |
| CVE-1999-1422 | Slackware创建Trojan horse程序漏洞 | |
| CVE-1999-1421 | N-Base交换机漏洞 | |
| CVE-1999-1420 | N-Base交换机漏洞 | |
| CVE-1999-1418 | ICQ 99a文件存在信息泄露漏洞 | |
| CVE-1999-1417 | Solaris ab2 (DynaWeb) Server DoS &潜在木马漏洞 | |
| CVE-1999-1416 | Solaris ab2 (DynaWeb) Server DoS &潜在木马漏洞 | |
| CVE-1999-1405 | AIX snap不安全暂时文件创建漏洞 | |
| CVE-1999-1399 | IRIX SpaceWare spaceball权限许可和访问控制漏洞 | |
| CVE-1999-1400 | 经济学家屏幕保护程序中的漏洞 | |
| CVE-1999-1401 | IRIX searchbook漏洞 | |
| CVE-1999-1403 | IBM/Tivoli OPC Tracker Agent多重漏洞 | |
| CVE-1999-1404 | IBM/Tivoli OPC Tracker Agent多重漏洞 | |
| CVE-1999-1410 | IRIX /usr/lib/netaddpr漏洞 |
Showing top 20 of 393 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-1999-1126
No comments yet