ID CVE-2005-4552
Summary The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges.
References
Vulnerable Configurations
  • cpe:2.3:a:sun:solaris_pc_netlink:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:sun:solaris_pc_netlink:2.0:*:*:*:*:*:*:*
CVSS
Base: 7.2 (as of 11-10-2017 - 01:30)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:C/I:C/A:C
oval via4
accepted 2006-02-22T08:27:00.000-04:00
class vulnerability
contributors
name Robert L. Hollis
organization ThreatGuard, Inc.
description The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges.
family unix
id oval:org.mitre.oval:def:1409
status accepted
submitted 2006-01-11T12:56:00.000-04:00
title PC Netlink 2.0 Privilege Escalation Vulnerability
version 36
refmap via4
bid 16059
osvdb 22045
sectrack
  • 1015408
  • 1015409
secunia 18230
sunalert
  • 102117
  • 102122
vupen ADV-2005-3083
xf
  • sun-pcnetlink-slsadmin-insecure(23853)
  • sun-pcnetlink-slsmgr-insecure(23851)
Last major update 11-10-2017 - 01:30
Published 28-12-2005 - 11:03
Last modified 11-10-2017 - 01:30
Back to Top