| Reporter | Title | Published | Views | Family All 9 |
|---|---|---|---|---|
 | CVE-2010-1183 | 24 Mar 201000:00 | – | circl |
 | CVE-2010-1183 | 29 Mar 201022:00 | – | cvelist |
 | Solaris 10 Patch 137097-01 - Symlink Privilege Escalation | 11 Aug 201200:00 | – | exploitdb |
| Solaris Recommended Patch Cluster 6/19 (x86) - Local Privilege Escalation | 9 Jul 201300:00 | – | exploitdb |
| Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities | 24 Mar 201000:00 | – | exploitdb |
 | EUVD-2010-1213 | 7 Oct 202500:30 | – | euvd |
 | CVE-2010-1183 | 29 Mar 201022:30 | – | nvd |
 | Solaris Recommended Patch Cluster 6/19 Local Root | 8 Jul 201300:00 | – | packetstorm |
 | Design/Logic Flaw | 29 Mar 201022:30 | – | prion |
| Source | Link |
|---|---|
| securityfocus | www.securityfocus.com/archive/1/510311/100/0/threaded |
| securityfocus | www.securityfocus.com/archive/1/510305/100/0/threaded |
| exchange | www.exchange.xforce.ibmcloud.com/vulnerabilities/57149 |
| securityfocus | www.securityfocus.com/bid/38928 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| /tmp/iconf_entries.$args[1] | path | /tmp/iconf_entries.$args[1] | Symlink attack to append data to arbitrary file via Update Manager during patch installation. | CWE-59 |
| /tmp/CLEANUP | path | /tmp/CLEANUP | Symlink abuse to modify arbitrary files by exploiting temporary file handling during patch/update operations. | CWE-59 |
| /tmp/diskette_rc.d/rcs9.sh | path | /tmp/diskette_rc.d/rcs9.sh | Pre/Post patch scripts that can be replaced or augmented to gain root privileges via symlinked or malicious shell scripts. | CWE-59 |
| /tmp/disketterc.d/rcs9.sh | path | /tmp/diskette_rc.d/rcs9.sh | Pre/Post patch scripts that can be replaced or augmented to gain root privileges via symlinked or malicious shell scripts. | CWE-59 |
| /tmp/r00t | path | /tmp/r00t | Setuid root shell created via tampered patch process; a symlink attack can enable writing/placing malicious binaries. | CWE-59 |
| /etc/shadow | path | /etc/shadow | Target file for privilege escalation via tampering with patch/install scripts. | CWE-59 |
| /etc/passwd | path | /etc/passwd | Target file for privilege escalation via tampering with patch/install scripts. | CWE-59 |
| /tmp/ncrstmp | path | /tmp/ncrstmp | Temporary file used in patch/update scripts that can be overwritten via symlink attack. | CWE-59 |
| /etc/driver_aliases | path | /etc/driver_aliases | File modified by patch process that can be manipulated through symlink attacks. | CWE-59 |
| /tmp/disketterc.d/rcs9.sh | path | /tmp/disketterc.d/rcs9.sh | Post-install script path susceptible to tampering leading to privilege escalation. | CWE-59 |
10
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
16 Jun 2026 23:17Current
6.2Medium risk
Vulners AI Score6.2
CVSS 23.3
EPSS0.00494