CVEvulnerability

CVE-2002-0265

4.6 MEDIUM Published 2002-05-29 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-05-29
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file.

Affected configurations

• sawmill sawmill 6.2 • sawmill sawmill 6.2.1 • sawmill sawmill 6.2.2 • sawmill sawmill 6.2.3 • sawmill sawmill 6.2.4 • sawmill sawmill 6.2.5 • sawmill sawmill 6.2.6 • sawmill sawmill 6.2.7 • sawmill sawmill 6.2.8 • sawmill sawmill 6.2.8a • sawmill sawmill 6.2.9 • sawmill sawmill 6.2.10 • sawmill sawmill 6.2.11 • sawmill sawmill 6.2.12 • sawmill sawmill 6.2.13 • sawmill sawmill 6.2.14

Related

Referenced by CWE · observed example (1)

  • CWE-279 Incorrect Execution-Assigned Permissions weakness

References