Vulnerability Name: | CCN-13992 | ||||||
Published: | 2003-12-12 | ||||||
Updated: | 2003-12-12 | ||||||
Summary: | Sun Solaris could allow a local attacker to launch a symlink attack, caused by a vulnerability in the libprint library. The fopen function in the nss_write.c file and the access function in lib/print/job.c file creates insecure temporary files. A local attacker could create a symbolic link for a file in /tmp to an arbitrary file on the system, which could allow the attacker to view, create or overwrite arbitrary files on the system. | ||||||
CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
| ||||||
CVSS v2 Severity: | 2.6 Low (CCN CVSS v2 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:P) 2.3 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:N/I:P/A:P/E:H/RL:OF/RC:C)
| ||||||
Vulnerability Consequences: | File Manipulation | ||||||
References: | Source: CCN Type: Sun Alert ID: 57451 Security Vulnerabilities in Solaris Printing Source: CCN Type: CIAC Information Bulletin O-041 Sun 'lpstat' Printing Vulnerability Source: XF Type: UNKNOWN solaris-libprint-symlink(13992) | ||||||
Vulnerable Configuration: | Configuration CCN 1: Denotes that component is vulnerable | ||||||
BACK |