Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Solaris Coredump漏洞
Vulnerability Description
kernel jumbo patch -35版本之前的Solaris 2.4存在漏洞，使得即使不在set-gid组中的用户也可以使用set-grid的程序进行存储器信息转储，本地用户利用该漏洞以更高的权限重写或新建文件，造成存储器信息转储，（如通过dmesg）。
CVSS Information
N/A
Vulnerability Type
N/A