| Vulnerability Name: | CVE-2003-1082 (CCN-11083) | ||||||||
| Assigned: | 2003-01-16 | ||||||||
| Published: | 2003-01-16 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2003-1068 Source: MITRE Type: CNA CVE-2003-1082 Source: CCN Type: SA7892 Solaris utmp_update Buffer Overflow Vulnerability Source: SECUNIA Type: UNKNOWN 7892 Source: CCN Type: SA8957 Sun Solaris "utmp_update" Privilege Escalation Vulnerability Source: CCN Type: SECTRACK ID: 1005935 Sun Solaris Operating System /usr/lib/utmp_update Buffer Overflow May Give Local Users Root Privileges Source: CCN Type: Sun Alert ID: 50008 Security Vulnerability with the Solaris /usr/lib/utmp_update Command Source: CCN Type: Sun Alert ID: 55260 A Security Vulnerability With The "/usr/lib/utmp_update" Command May Allow Local Unauthorized Privileges Source: SUNALERT Type: Vendor Advisory 50008 Source: CCN Type: CIAC Information Bulletin N-105 Sun "/usr/lib/utmp_update" Command Buffer Overflow Vulnerability Source: CIAC Type: UNKNOWN N-105 Source: CCN Type: US-CERT VU#596748 Sun Solaris /usr/lib/utmp_update contains buffer overflow Source: CERT-VN Type: Third Party Advisory, US Government Resource VU#596748 Source: CCN Type: OSVDB ID: 14031 Solaris utmp_update Local Overflow Source: CCN Type: OSVDB ID: 59830 Solaris utmp_update Function Local Overflow Source: BID Type: UNKNOWN 6639 Source: CCN Type: BID-6639 Sun Solaris UTMP_Update Local Buffer Overflow Vulnerability Source: CCN Type: BID-7835 Sun Solaris UTMP_Update Buffer Overflow Vulnerability Source: SECTRACK Type: UNKNOWN 1005935 Source: XF Type: UNKNOWN solaris-utmp-update-bo(11083) Source: XF Type: UNKNOWN solaris-utmp-update-bo(11083) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||