PT-2003-2028 · Oracle · Solaris

Brant Roman · Publicado 2003-01-03 · Atualizado 2018-10-30 · CVE-2003-1071

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Solaris versions 2.6 through 9

Description The issue allows local users to send messages to logged on users that appear to come from arbitrary user IDs. This is achieved by closing stderr before executing the wall command, then supplying a spoofed from header.

Recommendations For Solaris versions 2.6 through 9, consider restricting access to the wall daemon to minimize the risk of exploitation. As a temporary workaround, consider disabling the wall command until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2003-1071

Produtos afetados

Solaris

Referências · 10

• 🔥 https://exploit-db.com/exploits/22120 · Exploit
• 🔥 http://securityfocus.com/archive/1/305105 · Exploit
• 🔥 http://kb.cert.org/vuls/id/944241 · Exploit
• http://secunia.com/advisories/7825 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11608 · Nota
• http://securityfocus.com/bid/6509 · Nota
• http://securitytracker.com/id?1005882 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-51980-1 · Aviso do Fabricante
• http://securitytracker.com/id?1006682 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1071 · Nota de Segurança