Vulnerability in Sun Solaris

CVE-2008-0730

The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.

EPSS: 0.004 (28.5th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References

  • cve@mitre.org (Third Party Advisory, vdb-entry, x_refsource_VUPEN)
  • cve@mitre.org (x_refsource_SECUNIA, Third Party Advisory, third-party-advisory)
  • cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
  • cve@mitre.org (signature, x_refsource_OVAL, Third Party Advisory, vdb-entry)
  • cve@mitre.org (vendor-advisory, x_refsource_SUNALERT, Broken Link)