CVE-2002-1590

The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2002-10-29

Last modified

2024-08-08

Weaknesses

CWE-264

Affected products

• Solaris (Sun)
• Sunos (Sun)

References

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-48320-1
• http://www.ciac.org/ciac/bulletins/n-010.shtml
• http://www.securityfocus.com/bid/6061
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10495