PT-2010-2068 · Sun · Opensolaris

Publicado 2010-01-08 · Atualizado 2017-08-17 · CVE-2010-0271

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun OpenSolaris versions snv 51 through snv 130

Description The issue makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware Abstraction Layer (HAL) specification, due to hald not having the proc audit privilege during attempts to write to the auditing log.

Recommendations For Sun OpenSolaris versions snv 51 through snv 130, consider granting the proc audit privilege to hald to ensure proper auditing of changes to connected hardware devices.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2010-0271

Produtos afetados

Opensolaris

Referências · 6

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-274830-1 · Aviso do Fabricante
• http://securityfocus.com/bid/37656 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0271 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55461 · Nota
• http://securitytracker.com/id?1023416 · Nota
• http://vupen.com/english/advisories/2010/0076 · Nota