Vulnerability Note VU#281356
Sun Solaris tcsh(1) contains vulnerability in the built-in ls-F command
Sun Solaris tcsh(1) contains a vulnerability in the built-in ls-F command that could allow an unprivileged user to create or remove files or gain privileges of another user.
A vulnerability in the built-in ls-F command of the Sun Solaris tcsh(1) may allow an intruder to create or remove files or gain privileges of another user. Note that only Solaris 8 is affected by this issue. Solaris 7 and 9 are not affected.
A local user could create or remove files or gain privileges of another user, possibly root.
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Sun Microsystems Inc.||Affected||-||16 Jan 2004|
CVSS Metrics (Learn More)
Thanks to Sun Microsystems for the information contained in their security advisory.
This document was written by Damon Morda.
- CVE IDs: CAN-2003-1024
- Date Public: 22 Dec 2003
- Date First Published: 15 Jan 2004
- Date Last Updated: 16 Jan 2004
- Severity Metric: 3.07
- Document Revision: 15
If you have feedback, comments, or additional information about this vulnerability, please send us email.