CVE-1999-1403

High

Published: 02/10/1998(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.33%

25th percentile - higher than 25% of all known CVEs

Summary

IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions that are world-readable and world-writable. This could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.

Risk Assessment

The risk to the organization is the potential for local users to disrupt system operations and possibly gain elevated privileges, leading to serious security breaches.

Recommendation

It is recommended to restrict permissions on files, directories, and IPC message queues created by the OPC Tracker Agent to prevent unauthorized access and modifications.

Other vulnerabilities in IBM/Tivoli OPC Tracker Agent version 2 release 1

CVE-1999-1404Medium
IBM/Tivoli OPC Tracker Agent version 2 release 1 is vulnerable to a denial of service attack that can be triggered by malformed data sent to the localtracker client port (5011). This attack prevents the connection from being closed properly.

Original NVD description (English source)

IBM/Tivoli OPC Tracker Agent version 2 release 1 creates files, directories, and IPC message queues with insecure permissions (world-readable and world-writable), which could allow local users to disrupt operations and possibly gain privileges by modifying or deleting files.