Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Solaris pkgadd不正确文件权限漏洞
Vulnerability Description
Solaris是一款由Sun Microsystems公司开发的UNIX操作系统，其中包含pkgadd命令对程序进行安装。 Solaris中的pkgadd在安装特殊格式的文件时存在漏洞，本地攻击者可能利用此漏洞以root用户权限安装文件。 在某些条件下，Solaris中的pkgadd命令会错误的设置文件suid/sguid位来安装文件，如果安装包中的相关pkgmap条目中使用了'?'字符，文件就可能以'root'权限安装，本地非特权攻击者可能利用这个漏洞进行安装木马等非法活动。
CVSS Information
N/A
Vulnerability Type
N/A