CVE-2011-0902: Medium severity oracle sun microsystems sunscreen firewall vulnerability
Published Feb 7, 2011
·Updated
Multiple untrusted search path vulnerabilities in the Java Service in Sun Microsystems SunScreen Firewall on SunOS 5.9 allow local users to execute arbitrary code via a modified (1) PATH or (2) LDLIBRARYPATH environment variable.
Affected Software
2 affected components
Oracle Sun Microsystems Sunscreen Firewall
Sun SunOS=5.9
Event History
Feb 7, 2011
CVE Published
via MITRE·08:19 PM
Data Sourced
via MITRE·08:19 PM
Description
Data Sourced
09:00 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2011-0902?
CVE-2011-0902 is considered a critical vulnerability due to its potential for local users to execute arbitrary code.
2
How do I fix CVE-2011-0902?
To fix CVE-2011-0902, ensure that untrusted paths are not included in the PATH or LD_LIBRARY_PATH environment variables for the Java Service.
3
What systems are affected by CVE-2011-0902?
CVE-2011-0902 affects the Sun Microsystems SunScreen Firewall on SunOS 5.9.
4
Can CVE-2011-0902 be exploited remotely?
CVE-2011-0902 is a local vulnerability and cannot be exploited remotely.
5
Who is responsible for addressing CVE-2011-0902?
The responsibility for addressing CVE-2011-0902 lies with the system administrators of affected environments.