low3.3Public exploit code
CVE-2010-1183
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary fil…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities2010-03-24 · local · solaris · Verified
- Solaris Recommended Patch Cluster 6/19 (x86) - Local Privilege Escalation2013-07-09 · local · linux_x86
- Solaris 10 Patch 137097-01 - Symlink Privilege Escalation2012-08-11 · local · solaris
Impact
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/510305/100/0/threaded
- http://www.securityfocus.com/archive/1/510311/100/0/threaded
- http://www.securityfocus.com/bid/38928
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57149
- http://www.securityfocus.com/archive/1/510305/100/0/threaded
- http://www.securityfocus.com/archive/1/510311/100/0/threaded
- http://www.securityfocus.com/bid/38928
- https://exchange.xforce.ibmcloud.com/vulnerabilities/57149