Lucene search

[email protected]NVD:CVE-2002-1871

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1871

2002-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

23.7%

JSON

pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a “?” (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.

Affected configurations

Nvd

Node

sunsolarisMatch2.6

sunsunosMatch5.5.1

sunsunosMatch5.7

sunsunosMatch5.8

VendorProductVersionCPE
sunsolaris2.6cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
sunsunos5.5.1cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*
sunsunos5.7cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
sunsunos5.8cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	2.6	cpe:2.3:o:sun:solaris:2.6:::::::*
sun	sunos	5.5.1	cpe:2.3:o:sun:sunos:5.5.1:::::::*
sun	sunos	5.7	cpe:2.3:o:sun:sunos:5.7:::::::*
sun	sunos	5.8	cpe:2.3:o:sun:sunos:5.8:::::::*

References

sunsolve.sun.com/search/document.do?assetkey=1-26-45693-1

www.iss.net/security_center/static/9544.php

www.securityfocus.com/bid/5208

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.4

Confidence

High

EPSS

0.001

Percentile

23.7%

JSON

Related for NVD:CVE-2002-1871

cvelist2 cve2 nvd1