VulnerabilityModified
CVE-2006-4439
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a…
LOW 3.6EPSS 0.38%
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.
- CVSS 2.0
- 3.6 LOWAV:L/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 0.38% probability · 32th percentile
- CISA KEV
- Not listed
- Affected
- sun/solaris
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/21633Patch, Vendor Advisory
- http://secunia.com/advisories/22992
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
- http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm
- http://www.osvdb.org/28203
- http://www.securityfocus.com/bid/19730
- http://www.vupen.com/english/advisories/2006/3397
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2010
- http://secunia.com/advisories/21633Patch, Vendor Advisory
- http://secunia.com/advisories/22992
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102513-1Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
- http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm
- http://www.osvdb.org/28203
- http://www.securityfocus.com/bid/19730
- http://www.vupen.com/english/advisories/2006/3397
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2010
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.