CVE-2008-0730
Last modified
CVE-2008-0730 is a vulnerability of currently unknown severity. The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.. EPSS estimates a 0.36% chance of exploitation in the next 30 days.
Description
The (1) Simplified Chinese, (2) Traditional Chinese, (3) Korean, and (4) Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under (a) .iiim/le and (b) .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of other users.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sun | Solaris | 10 |
References
- http://secunia.com/advisories/28931Third Party Advisory
- http://www.securityfocus.com/bid/27770Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/0452Third Party Advisory
- http://secunia.com/advisories/28931Third Party Advisory
- http://www.securityfocus.com/bid/27770Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2008/0452Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-0730?
How severe is CVE-2008-0730?
How do I fix CVE-2008-0730?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-0724The Everything Development Engine in The Everything Developm…
- CVE-2008-0725Multiple heap-based buffer overflows in the (1) FTP service …
- CVE-2008-0726Integer overflow in Adobe Reader and Acrobat 8.1.1 and earli…
- CVE-2008-0727Multiple buffer overflows in oninit.exe in IBM Informix Dyna…
- CVE-2008-0728The unmew11 function in libclamav/mew.c in libclamav in Clam…
- CVE-2008-0729Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote …
- CVE-2008-0731The Linux kernel before 2.6.18.8-0.8 in SUSE openSUSE 10.2 d…
- CVE-2008-0732The init script for Apache Geronimo on SUSE Linux follows sy…
- CVE-2008-0733SQL injection vulnerability in index.php in CS Team Counter …
- CVE-2008-0734SQL injection vulnerability in class_auth.php in Limbo CMS 1…
- CVE-2008-0735SQL injection vulnerability in mod/gallery/ajax/gallery_data…
- CVE-2008-0736admin/SA_shipFedExMeter.asp in CandyPress (CP) 4.1.1.26, and…
Are you affected by CVE-2008-0730?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
