PT-2006-2771 · Oracle · Solaris+4

Published 2006-04-13 · Updated 2018-10-30 · CVE-2006-1780

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Bourne shell (sh) in Solaris versions 8 through 10

Description The issue allows local users to cause a denial of service by crashing the Bourne shell (sh) during the creation of temporary files.

Recommendations For Solaris 8, consider applying configuration changes to restrict access to temporary file creation. For Solaris 9, restrict access to temporary file creation to minimize the risk of exploitation. For Solaris 10, avoid using the Bourne shell (sh) for temporary file creation until the issue is resolved.

Fix

Related Identifiers

CVE-2006-1780

Affected Products

Bourne Shell

Solaris

Solaris 10

Solaris 8

Solaris 9

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2006-1780 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102282-1 · Vendor Advisory
• http://secunia.com/advisories/19627 · Vendor Advisory
• http://securityfocus.com/bid/17478 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A881 · Note
• http://securitytracker.com/id?1015902 · Note
• http://vupen.com/english/advisories/2006/1333 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2006-122.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25744 · Note
• http://secunia.com/advisories/21493 · Note