PT-2009-2028 · Sco · Unixware+1

Qaaz · Publicado 2009-03-30 · Atualizado 2017-09-29 · CVE-2008-6558

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ReliantHA version 1.1.4 in SCO UnixWare 7.1.4

Description The issue allows local users to gain root privileges by modifying the RELIANT PATH environment variable to point to a malicious bin/hvenv program. This is due to an untrusted search path vulnerability in hvdisp and rcvm components.

Recommendations For ReliantHA version 1.1.4 in SCO UnixWare 7.1.4, consider restricting access to the RELIANT PATH environment variable to prevent modification by local users. Additionally, monitor and restrict execution of the bin/hvenv program to minimize the risk of exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-6558

Produtos afetados

Reliantha

Unixware

Referências · 7

• 🔥 https://exploit-db.com/exploits/5356 · Exploit
• 🔥 http://securityfocus.com/bid/28624 · Exploit
• ftp://ftp.sco.com/pub/unixware7/714/security/p534850/p534850.txt · Aviso do Fabricante
• http://osvdb.org/46707 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-6558 · Nota de Segurança
• http://secunia.com/advisories/30921 · Aviso do Fabricante
• http://osvdb.org/46706 · Nota