PT-2003-2078 · Sun · Sun Management Center

Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1124

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Management Center (SunMC) versions 2.1.1, 3.0, and 3.0 Revenue Release (RR)

Description The issue allows local users to create or modify arbitrary files when Sun Management Center is installed and run by root.

Recommendations For Sun Management Center (SunMC) version 2.1.1, consider restricting root access until a fix is available. For Sun Management Center (SunMC) version 3.0, restrict root access to minimize the risk of exploitation. For Sun Management Center (SunMC) version 3.0 Revenue Release (RR), limit the ability of local users to create or modify files when the software is run by root.

Correção

Identificadores relacionados

CVE-2003-1124

Produtos afetados

Sun Management Center

Referências · 6

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-55141-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2003-1124 · Nota de Segurança
• http://securityfocus.com/bid/7960 · Correção
• http://kb.cert.org/vuls/id/758932 · Correção
• http://secunia.com/advisories/9073 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12343 · Nota