PT-2003-2035 · Oracle · Solaris

Publicado 2003-02-28 · Atualizado 2018-10-30 · CVE-2003-1078

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Solaris versions 2.6, 7, 8

Description The FTP client in Solaris displays the user password on the screen during login when the debug flag is enabled.

Recommendations For Solaris versions 2.6, 7, 8, avoid using the debug (-d) flag when logging in via FTP to prevent password exposure.

Correção

Identificadores relacionados

CVE-2003-1078

Produtos afetados

Solaris

Referências · 6

• http://secunia.com/advisories/8186 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1078 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11436 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-51081-1 · Aviso do Fabricante
• http://securityfocus.com/bid/6989 · Nota
• http://securitytracker.com/id?1006195 · Nota