PT-2003-2020 · Oracle · Solaris

Publicado 2003-08-20 · Atualizado 2018-10-30 · CVE-2003-1063

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Solaris versions 2.6 and 7

Description The issue allows remote attackers to bypass the intended security policy by silently reenabling services due to the patches overwriting the inetd.conf file.

Recommendations For Solaris versions 2.6 and 7, manually review and update the inetd.conf file after applying patches to ensure that the intended security policy is maintained and no unwanted services are reenabled.

Correção

Identificadores relacionados

CVE-2003-1063

Produtos afetados

Solaris

Referências · 5

• https://exchange.xforce.ibmcloud.com/vulnerabilities/12942 · Nota
• http://securityfocus.com/bid/8461 · Aviso do Fabricante
• http://ciac.org/ciac/bulletins/n-134.shtml · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-56300-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1063 · Nota de Segurança