PT-2008-6796 · Sun · Sun Snmp Management Agent

Publicado 2008-12-29 · Atualizado 2017-08-08 · CVE-2008-5746

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun SNMP Management Agent (SUNWmasf) versions 1.4u2 through 1.5.4

Description The issue allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files.

Recommendations For Sun SNMP Management Agent (SUNWmasf) versions 1.4u2 through 1.5.4, consider restricting access to temporary files to prevent a symlink attack until a patch is available.

Correção

Link Following

Enumeração de Fraquezas

CWE-59

Identificadores relacionados

CVE-2008-5746

Produtos afetados

Sun Snmp Management Agent

Referências · 7

• http://securitytracker.com/id?1021496 · Nota
• http://secunia.com/advisories/33328 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/47619 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-5746 · Nota de Segurança
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1 · Aviso do Fabricante
• http://osvdb.org/50987 · Nota
• http://securityfocus.com/bid/33014 · Nota