PT-2005-4832 · Sun · Sun Solaris 10

Publicado 2005-12-09 · Atualizado 2011-03-08 · CVE-2005-4133

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Solaris 10

Description The issue in Sun Solaris 10 allows local users to obtain the proxy authentication password when the Sun Update Connection is configured to use a web proxy. This can be achieved via an unspecified vector and through proxy log files.

Recommendations For Sun Solaris 10, consider restricting access to proxy log files and reconfiguring the Sun Update Connection to not use a web proxy until a fix is available. As a temporary workaround, changing the proxy authentication password regularly can help minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-4133

Produtos afetados

Sun Solaris 10

Referências · 6

• http://secunia.com/advisories/17931 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2803 · Nota
• http://securitytracker.com/id?1015331 · Nota
• http://securityfocus.com/bid/15772 · Nota
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102090-1 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4133 · Nota de Segurança