PT-2010-2068 · Sun · Opensolaris

Published 2010-01-08 · Updated 2017-08-17 · CVE-2010-0271

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Sun OpenSolaris versions snv 51 through snv 130

Description The issue makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware Abstraction Layer (HAL) specification, due to hald not having the proc audit privilege during attempts to write to the auditing log.

Recommendations For Sun OpenSolaris versions snv 51 through snv 130, consider granting the proc audit privilege to hald to ensure proper auditing of changes to connected hardware devices.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2010-0271

Affected Products

Opensolaris

References · 6

• http://sunsolve.sun.com/search/document.do?assetkey=1-66-274830-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0271 · Security Note
• http://securityfocus.com/bid/37656 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/55461 · Note
• http://securitytracker.com/id?1023416 · Note
• http://vupen.com/english/advisories/2010/0076 · Note