Lucene search

[email protected]CVE-2008-5746

HistoryDec 29, 2008 - 3:24 p.m.

CVE-2008-5746

2008-12-2915:24:23

CWE-59

[email protected]

web.nvd.nist.gov

cve-2008-5746

sun snmp management agent

sunwmasf

symlink attack

file overwrite

privilege escalation

nvd

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%

JSON

Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files.

Affected configurations

NVD

Node

sunsnmp_management_agentMatch1.4update_2sparc

sunsnmp_management_agentMatch1.5.3sparc

sunsnmp_management_agentMatch1.5.4sparc

AND

sunsolarisMatch8sparc

sunsolarisMatch9sparc

sunsolarisMatch10sparc

CPENameOperatorVersion
sun:snmp_management_agentsun snmp management agenteq1.4
sun:snmp_management_agentsun snmp management agenteq1.5.3
sun:snmp_management_agentsun snmp management agenteq1.5.4

CPE	Name	Operator	Version
sun:snmp_management_agent	sun snmp management agent	eq	1.4
sun:snmp_management_agent	sun snmp management agent	eq	1.5.3
sun:snmp_management_agent	sun snmp management agent	eq	1.5.4

References

osvdb.org/50987

secunia.com/advisories/33328

sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1

www.securityfocus.com/bid/33014

www.securitytracker.com/id?1021496

exchange.xforce.ibmcloud.com/vulnerabilities/47619

6.9 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%

JSON

Related for CVE-2008-5746

nvd1 prion1 cvelist1