CVE

Id
9782  
CVE No.
CVE-2004-1354  
Status
Candidate  
Description
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.  
Phase
Assigned (20050106)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
66548 9782 CVE-2004-1354 MLIST:[focus-sun] 20031022 Information disclosure with SMC webserver on Solaris 9  View
66549 9782 CVE-2004-1354 URL:http://www.derkeiler.com/Mailing-Lists/securityfocus/focus-sun/2003-10/0032.html  View
66550 9782 CVE-2004-1354 SUNALERT:57559  View
66551 9782 CVE-2004-1354 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-57559-1&searchclause=%22category:security%22%20%20111313-02  View
66552 9782 CVE-2004-1354 AUSCERT:ESB-2004.0347  View
66553 9782 CVE-2004-1354 URL:http://www.auscert.org.au/render.html?it=4105  View
66554 9782 CVE-2004-1354 MISC:http://spoofed.org/files/text/solaris-smc-advisory.txt  View
66555 9782 CVE-2004-1354 BID:8873  View
66556 9782 CVE-2004-1354 URL:http://www.securityfocus.com/bid/8873  View
66557 9782 CVE-2004-1354 BID:10349  View
66558 9782 CVE-2004-1354 URL:http://www.securityfocus.com/bid/10349  View
66559 9782 CVE-2004-1354 OSVDB:6119  View
66560 9782 CVE-2004-1354 URL:http://www.osvdb.org/displayvuln.php?osvdb_id=6119  View
66561 9782 CVE-2004-1354 OVAL:oval:org.mitre.oval:def:1482  View
66562 9782 CVE-2004-1354 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1482  View
66563 9782 CVE-2004-1354 SECUNIA:11616  View
66564 9782 CVE-2004-1354 URL:http://secunia.com/advisories/11616/  View
66565 9782 CVE-2004-1354 XF:smc-dotdot-directory-traversal(16146)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62819 JVNDB-2004-000160 Sun Solaris の TCP/IP スタックにおけるサービス運用妨害 (DoS) の脆弱性 Sun Solaris には、TCP/IP スタックの実装に不備が存在するため、 putnext() での NULL ポインタの参照によりカーネルパニックが発生する脆弱性が存在します。 CVE-2004-1355 9782 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000160.html  View