PT-2003-2078 · Sun · Sun Management Center

Published 2003-12-31 · Updated 2017-07-11 · CVE-2003-1124

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun Management Center (SunMC) versions 2.1.1, 3.0, and 3.0 Revenue Release (RR)

Description The issue allows local users to create or modify arbitrary files when Sun Management Center is installed and run by root.

Recommendations For Sun Management Center (SunMC) version 2.1.1, consider restricting root access until a fix is available. For Sun Management Center (SunMC) version 3.0, restrict root access to minimize the risk of exploitation. For Sun Management Center (SunMC) version 3.0 Revenue Release (RR), limit the ability of local users to create or modify files when the software is run by root.

Fix

Related Identifiers

CVE-2003-1124

Affected Products

Sun Management Center

References · 6

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-55141-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1124 · Security Note
• http://securityfocus.com/bid/7960 · Patch
• http://kb.cert.org/vuls/id/758932 · Patch
• http://secunia.com/advisories/9073 · Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12343 · Note