Solaris wbem Unsafe Use Of Temporary Files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Below is the full disclosure information for CVE-2010-2384. It was reported to [email protected] on 3 January, 2010 and assigned Sun bug 6913886. This vulnerability was addressed by Sun/Oracle in the July 2010 Critical Patch Update...

CVE-2010-2384: Solaris wbem unsafe use of temporary files

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Below is the full disclosure information for CVE-2010-2384. It was reported to [email protected] on 3 January, 2010 and assigned Sun bug 6913886. This vulnerability was addressed by Sun/Oracle in the July 2010 Critical Patch Update...

CVE-2010-2384

CVE-2010-2384 affects Oracle Solaris 9/10. The Solaris wbem service, when enabled, runs SUNWrmui_reg.sh and can be abused by an unprivileged local user via unsafe handling of temporary files in /tmp, potentially impacting confidentiality and integrity. A full disclosure and patching guidance desc...