Lucene search

K
cve[email protected]CVE-2008-0730
HistoryFeb 12, 2008 - 9:00 p.m.

CVE-2008-0730

2008-02-1221:00:00
CWE-264
web.nvd.nist.gov
14
sun solaris
language input methods
file permissions
security vulnerability
cve-2008-0730

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.2%

The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.

Affected configurations

NVD
Node
sunsolarisMatch10kosparc
OR
sunsolarisMatch10kox86
OR
sunsolarisMatch10thsparc
OR
sunsolarisMatch10thx86
OR
sunsolarisMatch10zhsparc
OR
sunsolarisMatch10zhx86
CPENameOperatorVersion
sun:solarissun solariseq10

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.3 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

13.2%

Related for CVE-2008-0730