Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2004-1354
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2004-1354

Description:
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inacessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/16146

SUNALERT
  http://sunsolve.sun.com/search/document.do?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02

SAID
  Secunia Advisory: SA11616

OVAL
  http://oval.mitre.org/oval/definitions/data/oval1482.html

OSVDB
  6119

MLIST
  http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-sun/2003-10/0032.html

MISC
  http://spoofed.org/files/text/solaris-smc-advisory.txt

BID
  10349
  8873

AUSCERT
  http://www.auscert.org.au/render.html?it=4105


Return to the previous page.