CVE  通用漏洞与披露Common Vulnerabilities and Exposures

[原文]SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.

[CNNVD]Cabletron Spectrum Enterprise Manager 授权许可漏洞(CNNVD-199906-023)

        Cabletron Spectrum Enterprise Manager 5.0版本中的SpectroSERVER安装一个带有不安全许可的目录树，本地用户利用此漏洞替换一个带有Trojan 木马的享有特权的可执行文件（进程），并且使根更容易进入或者导致管理员妥协。