| Vulnerability Name: | CVE-2002-0158 (CCN-8703) | ||||||||||||
| Assigned: | 2002-04-02 | ||||||||||||
| Published: | 2002-04-02 | ||||||||||||
| Updated: | 2018-10-30 | ||||||||||||
| Summary: | Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument. | ||||||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||||||
| Vulnerability Type: | CWE-Other | ||||||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||||||
| References: | Source: VULNWATCH Type: Exploit, Patch, Vendor Advisory 20020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflow Source: MITRE Type: CNA CVE-2002-0158 Source: BUGTRAQ Type: UNKNOWN 20020402 NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflow Source: CONFIRM Type: UNKNOWN http://sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F108652 Source: CCN Type: Sun Alert ID: 44843 Xsun(1) Might Cause a Buffer Overflow in Solaris Source: CCN Type: NSFOCUS Security Advisory (SA2002-01) Sun Solaris Xsun "-co" heap overflow Source: CCN Type: OSVDB ID: 8703 Solaris Xsun -co Argument Local Overflow Source: CCN Type: OSVDB ID: 8704 SCO Xsco -co Argument Local Overflow Source: BID Type: UNKNOWN 4408 Source: CCN Type: BID-4408 Sun Solaris XSun Color Database File Heap Overflow Vulnerability Source: XF Type: UNKNOWN solaris-xsun-co-bo(8703) Source: XF Type: UNKNOWN solaris-xsun-co-bo(8703) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:14 Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:33 | ||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||
| Oval Definitions | |||||||||||||
| |||||||||||||
| BACK | |||||||||||||