PT-2006-3708 · Sun · Storade

Publicado 2006-06-02 · Atualizado 2017-07-20 · CVE-2006-2790

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Storage Automated Diagnostic Environment (StorADE) version 2.4

Description A package component in StorADE uses world-writable permissions for certain critical files and directories. This issue allows local users to gain privileges.

Recommendations For StorADE version 2.4, consider changing the permissions of the critical files and directories to prevent world-writable access until a patch is available. Restrict access to these files and directories to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-2790

Produtos afetados

Storade

Referências · 7

• http://securitytracker.com/id?1016215 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-2790 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26899 · Nota
• http://vupen.com/english/advisories/2006/2139 · Nota
• http://securityfocus.com/bid/18266 · Nota
• http://secunia.com/advisories/20445 · Nota
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102305-1 · Aviso do Fabricante