Lucene search
HistoryApr 19, 2011 - 7:55 p.m.
CVE-2011-0412
cve-2011-0412
oracle solaris
patch files
unauthorized access
security vulnerability
nvd
5.8 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
25.4%
Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks.
Related
nessus
nessus
Solaris 8 (x86) : 110935-28
2004-07-12 00:00:00
Solaris 8 (sparc) : 110934-28
2004-07-12 00:00:00
Solaris 10 (x86) : 119255-92
2018-03-12 00:00:00
prion
prion
Default credentials
2011-04-19 19:55:00
seebug
seebug
Oracle Solaris 10εζ»θ‘₯δΈζδ»Άε―η εεΈζ³ι²ζΌζ΄
2011-04-08 00:00:00
cvelist
cvelist
CVE-2011-0412
2011-04-19 19:00:00
cert
cert
Oracle Solaris 10 password hashes leaked through back-out patch files
2011-04-05 00:00:00
securityvulns
securityvulns
oracle
oracle
cpuapr2011
2011-04-19 00:00:00
5.8 Medium
AI Score
Confidence
Low
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
0.001 Low
EPSS
Percentile
25.4%
Related for CVE-2011-0412