Description
The Web-Based Enterprise Management (WBEM) packages (1) SUNWwbdoc, (2) SUNWwbcou, (3) SUNWwbdev and (4) SUNWmgapp packages, when installed using Solaris 8 Update 1/01 or later, install files with world or group write permissions, which allows local users to gain root privileges or cause a denial of service.
References
- N-010 third-party-advisory government-resource
- 6061 vdb-entry
- solaris-wbem-files-insecure(10495) vdb-entry
- 48320 vendor-advisory