PT-2003-2015 · Sun · Xsun

Publicado 2003-12-03 · Atualizado 2018-10-30 · CVE-2003-1058

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Xsun server for Sun Solaris versions 2.6 through 9

Description The issue allows local users to cause a denial of service, resulting in an Xsun crash, or to create or overwrite arbitrary files on the system. This is likely achieved via a symlink attack on temporary server files when the Xsun server is running in Direct Graphics Access (DGA) mode.

Recommendations For Xsun server for Sun Solaris versions 2.6 through 9, consider disabling the DGA mode as a temporary workaround to minimize the risk of exploitation. Restrict access to temporary server files to prevent symlink attacks.

Correção

Identificadores relacionados

CVE-2003-1058

Produtos afetados

Xsun

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/13890 · Nota
• http://ciac.org/ciac/bulletins/o-033.shtml · Aviso do Fabricante
• http://secunia.com/advisories/10346 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1058 · Nota de Segurança
• http://osvdb.org/2892 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57419-1 · Aviso do Fabricante
• http://securityfocus.com/bid/9147 · Nota