CVE-2008-1684

2008-04-0623:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file.

References

secunia.com/advisories/29654

securitytracker.com/id?1019781

sunsolve.sun.com/search/document.do?assetkey=1-26-233284-1

www.securityfocus.com/bid/28584

www.vupen.com/english/advisories/2008/1076

exchange.xforce.ibmcloud.com/vulnerabilities/41626

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5369