VULNERABILITY INTELLIGENCE
CVE-2006-4439
CVSS score3.6 NONE
EPSS probability0.38%
CISA KEVNot currently listed
Published2006-08-29
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:P/I:P/A:N
Description
pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other
Primary references
- cve@mitre.org — Patch, Vendor Advisory
- cve@mitre.org
- cve@mitre.org — Vendor Advisory
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- cve@mitre.org
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory