PT-2005-3013
CVE-2005-2071
·
Publicado
2005-06-29
·
Atualizado
2016-10-18
Descrição por
CVSS 2.0
4.6
MédiaMétricasAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions:
Sun Solaris 10 on x86 systems
Description:
The issue allows local users to execute arbitrary code with PRIV NET RAWACCESS privileges. This can be achieved through either a large number of -g arguments or a malformed -s argument with a trailing dot.
Recommendations:
For Sun Solaris 10 on x86 systems, consider restricting the use of the
traceroute command until a patch is available. As a temporary workaround, limit the number of -g arguments and avoid using malformed -s arguments to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.Explorabilidade
Exploit
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾