CVE-2002-0265

Опубликовано: 29 мая 2002

Источник: nvd

CVSS2: 4.6

EPSS Низкий

Описание

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file.

Ссылки

http://marc.info/?l=bugtraq&m=101346206921270&w=2
http://www.iss.net/security_center/static/8173.php
Patch
Vendor Advisory
http://www.sawmill.net/version_history.html
Vendor Advisory
http://www.securityfocus.com/bid/4077
Exploit
Patch
Vendor Advisory
http://marc.info/?l=bugtraq&m=101346206921270&w=2
http://www.iss.net/security_center/static/8173.php
Patch
Vendor Advisory
http://www.sawmill.net/version_history.html
Vendor Advisory
http://www.securityfocus.com/bid/4077
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sawmill:sawmill:6.2:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.1:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.2:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.3:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.4:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.5:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.6:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.7:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.8:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.8a:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.9:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.10:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.11:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.12:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.13:*:*:*:*:*:*:*

cpe:2.3:a:sawmill:sawmill:6.2.14:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00442

Низкий

4.6 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-fw77-wwq7-q5qf

github

почти 4 года назад