Vulnerability Bulletins |
Ejecución de comandos arbitrarios en Sun Solaris 10 |
|
Vulnerability classification |
|
| Property | Value |
| Confidence level | Oficial |
| Impact | Obtener acceso |
| Dificulty | Experto |
| Required attacker level | Acceso remoto con cuenta |
System information |
|
| Property | Value |
| Affected manufacturer | Comercial Software |
| Affected software | Solaris 10 Operating System |
Description |
|
|
Se ha descubierto una vulnerabilidad en Sun Solaris 10. La vulnerabilidad reside en un error en Trusted Extensions Common Desktop Environment (CDE). Un atacante local podría ejecutar comandos arbitrarios con privielgios de root mediante métodos no determinados. |
|
Solution |
|
|
Actualización de software Sun (267488) Solaris 10 / SPARC / patch 126365-15 Solaris 10 / x86 / patch 126366-15 http://sunsolve.sun.com/pub-cgi/show.pl?target=patchpage |
|
Standar resources |
|
| Property | Value |
| CVE | |
| BID | |
Other resources |
|
|
Sun Alert Notification (267488) http://sunsolve.sun.com/search/document.do?assetkey=1-66-267488-1 |
|
Version history |
||
| Version | Comments | Date |
| 1.0 | Aviso emitido | 2009-09-29 |