CVE-2006-2790

HIGH 7.2CVE-2006-2790 · Published 02/06/2006 · updated 16/06/2026

In short

CVE-2006-2790 is a HIGH (CVSS 7.2) vulnerability affecting storage automated diagnostic environment (sun).
Chance of exploitation in the next 30 days (EPSS): 0.35%, higher than 28.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
storage automated diagnostic environment sun	`= 2.4`	No fix yet

Description

A package component in Sun Storage Automated Diagnostic Environment (StorADE) 2.4 uses world-writable permissions for certain critical files and directories, which allows local users to gain privileges.

References

secunia.com/advisories/20445
securitytracker.com/id
sunsolve.sun.com/search/document.do · Patch
securityfocus.com/bid/18266
vupen.com/english/advisories/2006/2139
exchange.xforce.ibmcloud.com/vulnerabilities/26899

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free