PT-2006-3708 · Sun · Storade

Published 2006-06-02 · Updated 2017-07-20 · CVE-2006-2790

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Storage Automated Diagnostic Environment (StorADE) version 2.4

Description A package component in StorADE uses world-writable permissions for certain critical files and directories. This issue allows local users to gain privileges.

Recommendations For StorADE version 2.4, consider changing the permissions of the critical files and directories to prevent world-writable access until a patch is available. Restrict access to these files and directories to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-2790

Affected Products

Storade

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-2790 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102305-1 · Vendor Advisory
• http://securitytracker.com/id?1016215 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26899 · Note
• http://vupen.com/english/advisories/2006/2139 · Note
• http://securityfocus.com/bid/18266 · Note
• http://secunia.com/advisories/20445 · Note