PT-2001-2569 · Sun · Solaris+1

Published 2001-12-31 · Updated 2017-07-11 · CVE-2001-1479

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun SMC (Sun Management Center) version 2.0 in Solaris 8

Description The issue allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC PORT. This is related to the smcboot component in Sun Management Center.

Recommendations For Sun SMC (Sun Management Center) version 2.0 in Solaris 8, consider restricting access to the smcboot component to minimize the risk of exploitation. As a temporary workaround, avoid using the /tmp/smc$SMC PORT file until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-1479

Affected Products

Solaris

Sun Management Center

References · 4

• 🔥 http://securiteam.com/unixfocus/6K00S203FC.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2001-1479 · Security Note
• http://securityfocus.com/bid/3763 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7756 · Note