PT-2008-3995 · Sun · Sun Solaris+1

Publicado 2008-06-03 · Atualizado 2017-09-29 · CVE-2008-2538

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 93

Description An unspecified issue in crontab allows local users to insert cron jobs into the crontab files of arbitrary users.

Recommendations For Sun Solaris versions 8 through 10, update to a version later than 10 to resolve the issue. For OpenSolaris versions prior to snv 93, update to snv 93 or later to resolve the issue.

Correção

Race Condition

Enumeração de Fraquezas

CWE-362

Identificadores relacionados

CVE-2008-2538

Produtos afetados

Opensolaris

Sun Solaris

Referências · 9

• http://securitytracker.com/id?1020151 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4725 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2538 · Nota de Segurança
• http://support.avaya.com/elmodocs2/security/ASA-2008-222.htm · Nota
• http://vupen.com/english/advisories/2008/1714 · Nota
• http://secunia.com/advisories/30482 · Aviso do Fabricante
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-237864-1 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42763 · Nota
• http://secunia.com/advisories/30542 · Aviso do Fabricante