CVE-2002-1590: High severity Sun SunOS vulnerability

Published Oct 29, 2002

Updated

The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.

Affected Software

2 affected components

Sun SunOS=5.8

Sun Solaris=8.0

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-48320-1

Event History

Oct 29, 2002

CVE Published

05:00 AM

Feb 8, 2005

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-1590?

CVE-2002-1590 is considered high severity due to its potential to allow local users to gain root privileges.

How do I fix CVE-2002-1590?

To fix CVE-2002-1590, you should change the permissions on the affected files to remove world or group write access.

Which versions of Solaris are affected by CVE-2002-1590?

CVE-2002-1590 affects Solaris 8 Update 1/01 and later versions.

What type of vulnerability is CVE-2002-1590?

CVE-2002-1590 is a privilege escalation vulnerability due to improper file permissions.

Who is impacted by CVE-2002-1590?

Local users on systems running affected versions of the Web-Based Enterprise Management packages are impacted by CVE-2002-1590.