Lucene search

MitreCVE-2003-1063

HistoryFeb 08, 2005 - 5:00 a.m.

CVE-2003-1063

2005-02-0805:00:00

mitre

web.nvd.nist.gov

cve-2003-1063

solaris

cache file system

security patch

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.

Affected configurations

Nvd

Node

sunsolarisMatch2.6

sunsolarisMatch7.0x86

sunsunosMatch-

sunsunosMatch5.7

VendorProductVersionCPE
sunsolaris2.6cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
sunsolaris7.0cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
sunsunos-cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*
sunsunos5.7cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	2.6	cpe:2.3:o:sun:solaris:2.6:::::::*
sun	solaris	7.0	cpe:2.3:o:sun:solaris:7.0::x86:::::
sun	sunos	-	cpe:2.3:o:sun:sunos:-:::::::*
sun	sunos	5.7	cpe:2.3:o:sun:sunos:5.7:::::::*

References

sunsolve.sun.com/search/document.do?assetkey=1-26-56300-1

www.ciac.org/ciac/bulletins/n-134.shtml

www.securityfocus.com/bid/8461

exchange.xforce.ibmcloud.com/vulnerabilities/12942

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.8

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

Related for CVE-2003-1063