Lucene search

[email protected]CVE-2003-1575

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2003-1575

2022-10-0316:15:41

CWE-264

[email protected]

web.nvd.nist.gov

vxfs

veritas file system

sun solaris

acl bypass

security vulnerability

cve-2003-1575

6.6 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.4%

JSON

VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem.

Affected configurations

NVD

Node

symantecvxfsMatch3.3.3

AND

sunsolarisMatch2.5.1sparc

sunsolarisMatch2.6sparc

sunsolarisMatch7.0sparc

sunsolarisMatch8.0sparc

Node

symantecvxfsMatch3.4

symantecvxfsMatch3.5

AND

sunsolarisMatch7.0sparc

sunsolarisMatch8.0sparc

sunsolarisMatch9.0sparc

CPENameOperatorVersion
symantec:vxfssymantec vxfseq3.3.3

CPE	Name	Operator	Version
symantec:vxfs	symantec vxfs	eq	3.3.3

References

sunsolve.sun.com/search/document.do?assetkey=1-21-113207-05-1

sunsolve.sun.com/search/document.do?assetkey=1-66-200161-1

6.6 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

9.4%

JSON

Related for CVE-2003-1575

cvelist1 nvd1