PT-2001-2569 · Sun · Solaris+1

Publicado 2001-12-31 · Atualizado 2017-07-11 · CVE-2001-1479

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun SMC (Sun Management Center) version 2.0 in Solaris 8

Description The issue allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC PORT. This is related to the smcboot component in Sun Management Center.

Recommendations For Sun SMC (Sun Management Center) version 2.0 in Solaris 8, consider restricting access to the smcboot component to minimize the risk of exploitation. As a temporary workaround, avoid using the /tmp/smc$SMC PORT file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-1479

Produtos afetados

Solaris

Sun Management Center

Referências · 4

• 🔥 http://securiteam.com/unixfocus/6K00S203FC.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1479 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7756 · Nota
• http://securityfocus.com/bid/3763 · Correção