## Description

SpectroSERVER in Cabletron Spectrum Enterprise Manager 5.0 installs a directory tree with insecure permissions, which allows local users to replace a privileged executable (processd) with a Trojan horse, facilitating a root or Administrator compromise.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### cabletron - spectrum_enterprise_manager

Affected Versions:

- 5.0

## References

- http://marc.info/?l=bugtraq&m=93024398513475&w=2
- http://marc.info/?l=bugtraq&m=93024398713491&w=2
- http://www.securityfocus.com/bid/495
  Patch Vendor Advisory
- http://marc.info/?l=bugtraq&m=93024398513475&w=2
- http://marc.info/?l=bugtraq&m=93024398713491&w=2
- http://www.securityfocus.com/bid/495
  Patch Vendor Advisory

Neural Processor Active