Beveiligingsadvies

CVE-2006-4439

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-08-29 23:00:00
Laatst bijgewerkt 2024-08-07 19:06:07
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.