Lucene search

[email protected]CVE-2002-1871

HistoryOct 03, 2022 - 4:23 p.m.

CVE-2002-1871

2022-10-0316:23:48

[email protected]

web.nvd.nist.gov

cve-2002-1871

pkgadd

sun solaris

privilege escalation

nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a “?” (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.

Affected configurations

NVD

Node

sunsolarisMatch2.6

sunsunosMatch5.5.1

sunsunosMatch5.7

sunsunosMatch5.8

CPENameOperatorVersion
sun:solarissun solariseq2.6
sun:sunossun sunoseq5.5.1
sun:sunossun sunoseq5.7
sun:sunossun sunoseq5.8

CPE	Name	Operator	Version
sun:solaris	sun solaris	eq	2.6
sun:sunos	sun sunos	eq	5.5.1
sun:sunos	sun sunos	eq	5.7
sun:sunos	sun sunos	eq	5.8

References

sunsolve.sun.com/search/document.do?assetkey=1-26-45693-1

www.iss.net/security_center/static/9544.php

www.securityfocus.com/bid/5208

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

6.9 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.2%

JSON

Related for CVE-2002-1871

cvelist2 nvd2 cve1