Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain privileges by modifying the file.

Threat-Mapped Scoring

Score: 3.0

Priority: P2 - Serious (High)

• S1 – Steal Customer Account Information

EPSS

Score: 0.00206
Percentile: 0.43205

CVSS Scoring

Affected Products

• cpe:2.3:a:sawmill:sawmill:6.2:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.1:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.2:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.3:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.4:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.5:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.6:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.7:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.8:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.8a:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.9:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.10:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.11:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.12:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.13:*:*:*:*:*:*:*
• cpe:2.3:a:sawmill:sawmill:6.2.14:*:*:*:*:*:*:*

← Back to Home