Lucene search

[email protected]NVD:CVE-2002-2323

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-2323

2002-12-3105:00:00

CWE-59

CWE-281

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

65.0%

JSON

Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which could allow local or remote attackers to bypass intended access restrictions.

Affected configurations

Nvd

Node

sunsolaris_pc_netlinkRange1.0–1.2

VendorProductVersionCPE
sunsolaris_pc_netlink*cpe:2.3:a:sun:solaris_pc_netlink:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris_pc_netlink	*	cpe:2.3:a:sun:solaris_pc_netlink::::::::

References

sunsolve.sun.com/search/document.do?assetkey=1-26-27807-1

www.iss.net/security_center/static/9665.php

www.securityfocus.com/bid/5281

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

7.7

Confidence

High

EPSS

0.002

Percentile

65.0%

JSON

Related for NVD:CVE-2002-2323

cve1 cvelist1