First published: Wed Dec 03 2003(Updated: )
The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Sun SunOS | =5.7 | |
Sun SunOS | =5.8 | |
Oracle Solaris SPARC | =9.0 | |
Oracle Solaris SPARC | =7.0 | |
Oracle Solaris SPARC | =9.0 | |
Oracle Solaris SPARC | =2.6 | |
Oracle Solaris SPARC | =8.0 | |
Sun SunOS |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-1058 is categorized as a high severity vulnerability due to its potential for causing denial of service and unauthorized file access.
To fix CVE-2003-1058, apply the latest security patches provided by Sun Microsystems or Oracle for affected versions of Solaris.
CVE-2003-1058 affects Sun Solaris versions 2.6 through 9, including SunOS 5.7 and 5.8.
CVE-2003-1058 is associated with local denial of service attacks and symlink attacks on temporary server files.
No, CVE-2003-1058 requires local user access to exploit the vulnerability.