SAS System 5.18 on VAX/VMS is installed with insecure permissions for its directories and startup file, which allows local users to gain privileges.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|
| Sas_system | Vax_vms | 5.18 (including) | 5.18 (including) |
References