CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: sun snmp management agent (sunwmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files. http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1

this issue can occur in the following releases:

sparc platform

    * sun snmp management agent "sunwmasf" 1.4u2 thru 1.5.4 (for solaris 8, 9 and 10)
 http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1

this issue is addressed in the following release:

sparc platform

    * sun snmp management agent ("sunwmasf") 1.5.5 or later (for solaris 8, 9 and 10)

sun snmp management agent is available for download at http://www.sun.com/download/
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2008-12-29
Last Modified Date: 2017-08-08
You are a cybersecurity expert assistant. Provide detailed information about vulnerabilities in a clear and structured format.
system
Please provide details about this vulnerability:  Improper Link Resolution Before File Access ('Link Following').
user
CWE Code: 59
Vulnerability Type: privilege_escalation
CVSS Score: 6.9
CWE Name:  Improper Link Resolution Before File Access ('Link Following')
Summary: sun snmp management agent (sunwmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files. http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1

this issue can occur in the following releases:

sparc platform

    * sun snmp management agent "sunwmasf" 1.4u2 thru 1.5.4 (for solaris 8, 9 and 10)
 http://sunsolve.sun.com/search/document.do?assetkey=1-26-248646-1

this issue is addressed in the following release:

sparc platform

    * sun snmp management agent ("sunwmasf") 1.5.5 or later (for solaris 8, 9 and 10)

sun snmp management agent is available for download at http://www.sun.com/download/
Access Authentication: NONE
Access Complexity: MEDIUM
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2008-12-29
Last Modified Date: 2017-08-08
assistant