PT-2011-2747 · Sun · Sunos+1

Kingcope · Publicado 2011-02-07 · Atualizado 2017-08-17 · CVE-2011-0902

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions SunScreen Firewall version on SunOS 5.9

Description The issue concerns untrusted search path vulnerabilities in the Java Service of SunScreen Firewall on SunOS 5.9, allowing local users to execute arbitrary code. This can be achieved by modifying the PATH or LD LIBRARY PATH environment variables.

Recommendations For SunScreen Firewall on SunOS 5.9, consider restricting access to the Java Service to minimize the risk of exploitation. As a temporary workaround, avoid using modified PATH or LD LIBRARY PATH environment variables until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2011-0902

Produtos afetados

Sunos

Sunscreen Firewall

Referências · 5

• 🔥 http://exploit-db.com/exploits/16041 · Exploit
• 🔥 http://securityfocus.com/bid/45963 · Exploit
• 🔥 https://exploit-db.com/exploits/16041 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/64887 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-0902 · Nota de Segurança