CVE-2002-1871: High severity Sun SunOS vulnerability
Published Dec 31, 2002
·Updated
pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which allows attackers to elevate privileges.
Affected Software
4 affected components
Sun SunOS=5.7
Sun SunOS=5.8
Sun SunOS=5.5.1
Sun Solaris=2.6
Remediation
Patch Available
Patch Available
Event History
Dec 31, 2002
CVE Published
05:00 AM
Data Sourced
via NVD·05:00 AM
RemedyDescriptionSeverityAffected Software
Jun 28, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1871?
CVE-2002-1871 is considered a medium to high severity vulnerability due to the potential for privilege escalation.
2
How do I fix CVE-2002-1871?
To fix CVE-2002-1871, ensure that pkgmap files do not contain a '?' (question mark) in the mode, owner, or group fields.
3
Which versions of Sun Solaris are affected by CVE-2002-1871?
CVE-2002-1871 affects Sun Solaris versions 2.5.1 through 8, including specific versions 5.5.1, 5.7, and 5.8.
4
What type of vulnerability is CVE-2002-1871?
CVE-2002-1871 is a privilege escalation vulnerability related to the pkgadd command.
5
Can CVE-2002-1871 be exploited remotely?
CVE-2002-1871 requires local access to exploit, as it involves manipulating pkgmap files.