PT-2005-4832 · Sun · Sun Solaris 10

Published 2005-12-09 · Updated 2011-03-08 · CVE-2005-4133

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Sun Solaris 10

Description The issue in Sun Solaris 10 allows local users to obtain the proxy authentication password when the Sun Update Connection is configured to use a web proxy. This can be achieved via an unspecified vector and through proxy log files.

Recommendations For Sun Solaris 10, consider restricting access to proxy log files and reconfiguring the Sun Update Connection to not use a web proxy until a fix is available. As a temporary workaround, changing the proxy authentication password regularly can help minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-4133

Affected Products

Sun Solaris 10

References · 6

• http://secunia.com/advisories/17931 · Vendor Advisory
• http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102090-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4133 · Security Note
• http://vupen.com/english/advisories/2005/2803 · Note
• http://securitytracker.com/id?1015331 · Note
• http://securityfocus.com/bid/15772 · Note