Sun Solaris 10 Pkgadd Incorrect Permissions Weakness
BID:19730
CVE-2006-4439 |Info
Sun Solaris 10 Pkgadd Incorrect Permissions Weakness
| Bugtraq ID: | 19730 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 25 2006 12:00AM |
| Updated: | Aug 31 2006 09:23PM |
| Credit: | This issue was announced by Sun. |
| Vulnerable: |
Sun Solaris 10_x86 Sun Solaris 10 |
| Not Vulnerable: | |
Discussion
Sun Solaris 10 Pkgadd Incorrect Permissions Weakness
Under certain conditions, the pkgadd utility may set file or directory permissions incorrectly. Patches are available that address this weakness.
An attacker may take advantage of this issue when exploiting another vulnerability or may use it in an attack scenario to gain elevated privileges or unauthorized system access. Due to the nature of the weakness, attackers can exploit it to gain access to files and directories that would otherwise be protected by appropriate permissions.
Under certain conditions, the pkgadd utility may set file or directory permissions incorrectly. Patches are available that address this weakness.
An attacker may take advantage of this issue when exploiting another vulnerability or may use it in an attack scenario to gain elevated privileges or unauthorized system access. Due to the nature of the weakness, attackers can exploit it to gain access to files and directories that would otherwise be protected by appropriate permissions.
Exploit / POC
Sun Solaris 10 Pkgadd Incorrect Permissions Weakness
An exploit is not required.
An exploit is not required.
Solution / Fix
Sun Solaris 10 Pkgadd Incorrect Permissions Weakness
Solution:
Sun has released an advisory (Sun Alert 102513) and patches to address this issue. Please see the referenced vendor advisory for more information.
Solution:
Sun has released an advisory (Sun Alert 102513) and patches to address this issue. Please see the referenced vendor advisory for more information.