CVE-2006-4439: Sun Solaris

Low severity, CVSS 3.6. EPSS: 0.4% chance of exploitation in the next 30 days.

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.

Affected products

• Sun Solaris: version 10.0 only

Published 2006-08-29. Last modified 2026-06-16.