PT-2007-4963 · Sun · Sun Solaris

Publicado 2007-07-12 · Atualizado 2018-10-30 · CVE-2007-3717

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8, 9, and 10 before 20070710

Description The issue is related to the rcp command on Sun Solaris, which does not properly call certain helper applications. This allows local users to gain privileges by creating files with specific names, possibly containing shell metacharacters or spaces.

Recommendations For Sun Solaris versions 8, 9, and 10 before 20070710, update to a version released after 20070710 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-3717

Produtos afetados

Sun Solaris

Referências · 9

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1772 · Nota
• http://osvdb.org/36611 · Nota
• http://vupen.com/english/advisories/2007/2494 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3717 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102978-1 · Correção, Aviso do Fabricante
• http://support.avaya.com/elmodocs2/security/ASA-2007-319.htm · Nota
• http://secunia.com/advisories/26024 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35334 · Nota
• http://secunia.com/advisories/26210 · Nota