PT-2006-2771 · Oracle · Solaris+4

Publicado 2006-04-13 · Atualizado 2018-10-30 · CVE-2006-1780

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Bourne shell (sh) in Solaris versions 8 through 10

Description The issue allows local users to cause a denial of service by crashing the Bourne shell (sh) during the creation of temporary files.

Recommendations For Solaris 8, consider applying configuration changes to restrict access to temporary file creation. For Solaris 9, restrict access to temporary file creation to minimize the risk of exploitation. For Solaris 10, avoid using the Bourne shell (sh) for temporary file creation until the issue is resolved.

Correção

Identificadores relacionados

CVE-2006-1780

Produtos afetados

Bourne Shell

Solaris

Solaris 10

Solaris 8

Solaris 9

Referências · 10

• http://securityfocus.com/bid/17478 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1780 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A881 · Nota
• http://securitytracker.com/id?1015902 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102282-1 · Aviso do Fabricante
• http://secunia.com/advisories/19627 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/1333 · Nota
• http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25744 · Nota
• http://secunia.com/advisories/21493 · Nota