PT-2008-3995 · Sun · Sun Solaris+1

Published 2008-06-03 · Updated 2017-09-29 · CVE-2008-2538

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 93

Description An unspecified issue in crontab allows local users to insert cron jobs into the crontab files of arbitrary users.

Recommendations For Sun Solaris versions 8 through 10, update to a version later than 10 to resolve the issue. For OpenSolaris versions prior to snv 93, update to snv 93 or later to resolve the issue.

Fix

Race Condition

Weakness Enumeration

CWE-362

Related Identifiers

CVE-2008-2538

Affected Products

Opensolaris

Sun Solaris

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2008-2538 · Security Note
• http://secunia.com/advisories/30482 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-237864-1 · Vendor Advisory
• http://secunia.com/advisories/30542 · Vendor Advisory
• http://securitytracker.com/id?1020151 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A4725 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2008-222.htm · Note
• http://vupen.com/english/advisories/2008/1714 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42763 · Note