CVE-1999-1395

CVSS 2.0 Score 7.2 of 10 (high)

Details

Published Nov 17, 1992
Updated: Nov 20, 2024

Summary

CVE-1999-1395 is a privilege escalation vulnerability impacting VMS 5.0 through 5.4-2's Monitor utility (SYS$SHARE:SPISHR.EXE). Local users can exploit this weakness to elevate their privileges, gaining unauthorized access to higher-level system functions. This can result in significant security risks, allowing attackers to compromise the system further or make unauthorized changes. The vulnerability is located within the utility, enabling local users to bypass normal access controls.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share