Lucene search
HistoryOct 03, 2022 - 4:22 p.m.
CVE-2001-1555
solaris 8
pt_chmod
terminal privileges
local attackers
cve-2001-1555
nvd
6.7 Medium
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
13.1%
pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users’ terminals by modifying the ACL of a TTY.
Affected configurations
Node
sunsolarisMatch8.0x86
ORsunsunosMatch5.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:solaris | sun solaris | eq | 8.0 |
| sun:sunos | sun sunos | eq | 5.8 |
6.7 Medium
AI Score
Confidence
High
4.6 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
0.0004 Low
EPSS
Percentile
13.1%
Related for CVE-2001-1555