PT-2004-2671 · Sun · Sun Solaris

Publicado 2004-12-31 · Atualizado 2018-10-30 · CVE-2004-1767

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 2.6 through 9

Description The issue allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.

Recommendations For Sun Solaris versions 2.6 through 9, consider restricting the ability to load kernel modules to minimize the risk of exploitation. As a temporary workaround, consider disabling the use of arbitrary loadable kernel modules until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2004-1767

Produtos afetados

Sun Solaris

Referências · 6

• http://kb.cert.org/vuls/id/702526 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57479-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-1767 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4532 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/14917 · Nota
• http://securityfocus.com/bid/9477 · Correção