CVEvulnerability

CVE-2003-1058

3.7 LOW Published 2003-12-03 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2003-12-03
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 3.7 LOW — AV:L/AC:H/Au:N/C:P/I:P/A:P

Description

The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.

Affected configurations

• sun solaris 2.6 • sun solaris 7.0 • sun solaris 8.0 • sun solaris 9.0 • sun sunos • sun sunos 5.7 • sun sunos 5.8

References

http://secunia.com/advisories/10346 Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57419-1 Patch, Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-033.shtml Patch, Vendor Advisory
http://www.osvdb.org/2892 Patch, Vendor Advisory
http://www.securityfocus.com/bid/9147 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/13890 exchange.xforce.ibmcloud.com
http://secunia.com/advisories/10346 Patch, Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-57419-1 Patch, Vendor Advisory
http://www.ciac.org/ciac/bulletins/o-033.shtml Patch, Vendor Advisory
http://www.osvdb.org/2892 Patch, Vendor Advisory
http://www.securityfocus.com/bid/9147 www.securityfocus.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/13890 exchange.xforce.ibmcloud.com