Vulnerability Description
The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sun | Solaris | 10 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/28931Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1Broken Link
- http://www.securityfocus.com/bid/27770Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/0452Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
- http://secunia.com/advisories/28931Third Party Advisory
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-201315-1Broken Link
- http://www.securityfocus.com/bid/27770Third Party AdvisoryVDB Entry
- http://www.vupen.com/english/advisories/2008/0452Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Third Party Advisory
FAQ
What is CVE-2008-0730?
CVE-2008-0730 is a vulnerability with a CVSS score of 4.6 (MEDIUM). The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xl...
How severe is CVE-2008-0730?
CVE-2008-0730 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-0730?
Check the references section above for vendor advisories and patch information. Affected products include: Sun Solaris.