First published: Fri Jul 26 2002(Updated: )
Format string vulnerability in the logging component of snmpdx for Solaris 5.6 through 8 allows remote attackers to gain root privileges.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun SunOS | =5.7 | |
Sun SunOS | =5.8 | |
Oracle Solaris and Zettabyte File System (ZFS) | =7.0 | |
Sun SunOS | =5.6 | |
Oracle Solaris and Zettabyte File System (ZFS) | =2.6 | |
Oracle Solaris and Zettabyte File System (ZFS) | =8.0 | |
Sun SunOS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2002-0796 has a high severity rating due to its potential to allow remote attackers to gain root privileges.
To fix CVE-2002-0796, apply the relevant patches or updates provided by Oracle for affected Solaris versions.
CVE-2002-0796 affects Solaris versions 5.6, 5.7, 5.8, 7.0, and 8.0.
Yes, CVE-2002-0796 can be exploited remotely by attackers due to the nature of the format string vulnerability.
CVE-2002-0796 involves the logging component of the snmpdx service on Solaris systems.