Lucene search

MitreCVE-2002-2323

HistoryOct 26, 2007 - 7:00 p.m.

CVE-2002-2323

2007-10-2619:00:00

CWE-281

CWE-59

mitre

web.nvd.nist.gov

sun pc netlink

acl

vulnerability

cve-2002-2323

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

65.0%

JSON

Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions.

Affected configurations

Nvd

Node

sunsolaris_pc_netlinkRange1.0–1.2

VendorProductVersionCPE
sunsolaris_pc_netlink*cpe:2.3:a:sun:solaris_pc_netlink:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris_pc_netlink	*	cpe:2.3:a:sun:solaris_pc_netlink::::::::

References

sunsolve.sun.com/search/document.do?assetkey=1-26-27807-1

www.iss.net/security_center/static/9665.php

www.securityfocus.com/bid/5281

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.2

Confidence

High

EPSS

0.002

Percentile

65.0%

JSON

Related for CVE-2002-2323