Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2005-2072
HistoryJun 29, 2005 - 4:00 a.m.

CVE-2005-2072

2005-06-2904:00:00
CWE-264
[email protected]
web.nvd.nist.gov
5

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.8%

JSON

The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs, which allows local users to gain privileges by (1) modifying LD_AUDIT to reference malicious code and possibly (2) using a long value for LD_AUDIT.

Affected configurations

Nvd
Node
sunsolarisMatch8.0x86
OR
sunsolarisMatch9.0sparc
OR
sunsolarisMatch9.0x86
OR
sunsolarisMatch10.0sparc
OR
sunsunosMatch5.8
VendorProductVersionCPE
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
sunsolaris10.0cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
sunsunos5.8cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*

Related

nessus 5
exploitdb 2
cve 1
cvelist 1
nessus
nessus
Solaris 9 (x86) : 113986-29
2004-07-12 00:00:00
Solaris 9 (sparc) : 112963-35
2004-07-12 00:00:00
Solaris 8 (sparc) : 109147-44
2004-07-12 00:00:00
exploitdb
exploitdb
Solaris 9/10 - 'ld.so' Local Privilege Escalation (1)
2005-06-28 00:00:00
Solaris 9/10 - 'ld.so' Local Privilege Escalation (2)
2005-06-28 00:00:00
cve
cve
CVE-2005-2072
2005-06-29 04:00:00
cvelist
cvelist
CVE-2005-2072
2005-06-29 04:00:00

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.8%

JSON
Related for NVD:CVE-2005-2072
nessus5exploitdb2cve1cvelist1