PT-2023-19374 · Oracle · Solaris 10

Marco Ivaldi · Publicado 2023-01-21 · Atualizado 2024-08-02 · CVE-2023-24040

Positive Technologies (AI Summary)

CVSS v3.1

7.1

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Common Desktop Environment version 1.6

Description The issue is related to a bug in the parser of lpstat, an external command invoked by dtprintinfo, which occurs during the listing of available printer names. This bug allows low-privileged local users to inject arbitrary printer names via the $HOME/.printers file, enabling them to manipulate control flow and disclose memory contents on Solaris 10 systems. It's noted that this vulnerability only affects products that are no longer supported by the maintainer.

Recommendations For Common Desktop Environment version 1.6, as the product is no longer supported by the maintainer, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Special Elements Injection

Enumeração de Fraquezas

CWE-74

Identificadores relacionados

CVE-2023-24040

Produtos afetados

Solaris 10

Referências · 8

• 🔥 https://github.com/hnsecurity/vulns/blob/main/HNS-2022-01-dtprintinfo.txt · Exploit
• 🔥 https://security.humanativaspa.it/nothing-new-under-the-sun · Exploit
• https://t.me/cvenotify/88504 · Publicação no Telegram
• https://t.me/cvenotify/42622 · Publicação no Telegram
• http://seclists.org/fulldisclosure/2023/Jan/24 · Nota
• https://t.me/cvenotify/85160 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-24040 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-24040 · Aviso do Fabricante