CVE-2008-0730
The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local…
Does this matter?
Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.
Description
The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.
- CVSS 2.0
- 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 0.36% probability · 29th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- sun/solaris
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/28931Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1Broken Link
- http://www.securityfocus.com/bid/27770Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/0452Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5545Third Party Advisory
- http://secunia.com/advisories/28931Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1Broken Link
- http://www.securityfocus.com/bid/27770Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/0452Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5545Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.