CVE-2010-1183

EUVD-2010-1213
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager.
Link Following
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
3.3 UNKNOWN
LOCAL
MEDIUM
AV:L/AC:M/Au:N/C:P/I:P/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 37%
Affected Products (NVD)
VendorProductVersion
sunsolaris
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/archive/1/510305/100/0/threaded
http://www.securityfocus.com/archive/1/510311/100/0/threaded
http://www.securityfocus.com/bid/38928
https://exchange.xforce.ibmcloud.com/vulnerabilities/57149
http://www.securityfocus.com/archive/1/510305/100/0/threaded
http://www.securityfocus.com/archive/1/510311/100/0/threaded
http://www.securityfocus.com/bid/38928
https://exchange.xforce.ibmcloud.com/vulnerabilities/57149