Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Sun Solaris pkgmap文件mode字段安全权限漏洞
Vulnerability Description
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的pkgadd工具在处理文件安装的权限上存在漏洞，文件可能以不安全的访问权限被安装，可能导致权限提升或信息泄露。 如果Solaris 10系统上所安装的补丁/软件包的文件或目录的pkgmap文件mode字段包含有"?"的话，pkgadd(1M)就可能错误的将相关文件或目录的权限设置为755或777。777权限是一个安全威胁，因为如果应用到文件的话，任何用户就都可以修改该文件；如果应用到目录的话，任何用户都可以修改该目录中的文
CVSS Information
N/A
Vulnerability Type
N/A