Lucene search

MitreCVE-2002-0158

HistorySep 01, 2004 - 4:00 a.m.

CVE-2002-0158

2004-09-0104:00:00

mitre

web.nvd.nist.gov

cve-2002-0158

buffer overflow

xsun

solaris

local access

root privileges

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

High

EPSS

Percentile

0.4%

JSON

Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.

Affected configurations

Nvd

Node

sunsolarisMatch2.6sparc

sunsolarisMatch7.0sparc

sunsolarisMatch7.0x86

sunsolarisMatch8.0sparc

sunsolarisMatch8.0x86

sunsunosMatch-

VendorProductVersionCPE
sunsolaris2.6cpe:2.3:o:sun:solaris:2.6:*:sparc:*:*:*:*:*
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:sparc:*:*:*:*:*
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
sunsunos-cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	2.6	cpe:2.3:o:sun:solaris:2.6::sparc:::::
sun	solaris	7.0	cpe:2.3:o:sun:solaris:7.0::sparc:::::
sun	solaris	7.0	cpe:2.3:o:sun:solaris:7.0::x86:::::
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0::sparc:::::
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0::x86:::::
sun	sunos	-	cpe:2.3:o:sun:sunos:-:::::::*

References

archives.neohapsis.com/archives/vulnwatch/2002-q2/0000.html

marc.info/?l=bugtraq&m=101776858410652&w=2

sunsolve.Sun.COM/pub-cgi/retrieve.pl?doc=fpatches%2F108652

www.securityfocus.com/bid/4408

exchange.xforce.ibmcloud.com/vulnerabilities/8703

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A33

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.9

Confidence

High

EPSS

Percentile

0.4%

JSON

Related for CVE-2002-0158