Oracle Solaris 8, 9, and 10 stores back-out patch files (undo.Z) unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks.

SunOS 5.10_x86: Install and Patch Utilities Patch.
Date this patch was last updated by Sun : Jun/11/15

SunOS 5.10_x86: Install and Patch Utilitie.
Date this patch was last updated by Sun : Feb/23/15

SunOS 5.10: Install and Patch Utilities Patch.
Date this patch was last updated by Sun : Jun/11/15

SunOS 5.10: Install and Patch Utilities Pa.
Date this patch was last updated by Sun : Feb/23/15

SunOS 5.9_x86: pkg utilities Patch.
Date this patch was last updated by Sun : Apr/05/11

SunOS 5.9: pkg utilities Patch.
Date this patch was last updated by Sun : Apr/05/11

SunOS 5.8_x86: package utilites patch.
Date this patch was last updated by Sun : Aug/19/08

SunOS 5.8: package utilities patch.
Date this patch was last updated by Sun : Aug/19/08

ID	Name	Product	Family	Severity
107819	Solaris 10 (x86) : 119255-92	Nessus	Solaris Local Security Checks	low
107818	Solaris 10 (x86) : 119255-91	Nessus	Solaris Local Security Checks	low
107316	Solaris 10 (sparc) : 119254-92	Nessus	Solaris Local Security Checks	low
107315	Solaris 10 (sparc) : 119254-91	Nessus	Solaris Local Security Checks	low
13606	Solaris 9 (x86) : 114568-29	Nessus	Solaris Local Security Checks	critical
13543	Solaris 9 (sparc) : 113713-30	Nessus	Solaris Local Security Checks	critical
13462	Solaris 8 (x86) : 110935-28	Nessus	Solaris Local Security Checks	low
13358	Solaris 8 (sparc) : 110934-28	Nessus	Solaris Local Security Checks	low

Detections

Analytics

CVE-2011-0412

high

Tenable Plugins

low

low

low

low

critical

critical

low

low