{"id":"CVE-2003-1575","aliases":["EUVD-2003-1565","GHSA-598h-cgm6-2m38"],"status":"published","title":"VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1...","description":"VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem.","severity":{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00285,"percentile":0.21178,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2010-01-28T20:00:00Z","modified":"2026-06-16T22:04:41Z","products":[{"vendor":"symantec","product":"vxfs"}],"references":[{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-66-200161-1","tags":["vendor-advisory","x_refsource_SUNALERT","x_transferred","Patch","Vendor Advisory"]},{"url":"http://sunsolve.sun.com/search/document.do?assetkey=1-21-113207-05-1","tags":["x_refsource_CONFIRM","x_transferred","Patch"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1575"},{"url":"https://github.com/advisories/GHSA-598h-cgm6-2m38"}],"sources":{"cve":[{"id":"CVE-2003-1575","description":"VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem.","status":"published","published":"2010-01-28T20:00:00Z","modified":"2024-09-17T04:25:22.484Z","updated_at":"2026-11-02T14:20:16.072351Z"}],"euvd":[{"id":"EUVD-2003-1565","description":"VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem.","status":"published","published":"2010-01-28T20:00:00Z","modified":"2024-09-17T04:25:22Z","updated_at":"2026-11-03T00:28:23.116921Z"}],"ghsa":[{"id":"GHSA-598h-cgm6-2m38","title":"VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1...","description":"VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem.","status":"published","published":"2022-04-29T01:28:18Z","modified":"2023-01-30T05:02:14Z","updated_at":"2026-11-02T14:46:35.666418Z"}],"nvd":[{"id":"CVE-2003-1575","description":"VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem.","status":"published","published":"2010-01-28T20:30:00.823Z","modified":"2026-06-16T22:04:41.287Z","cvss":[{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:00:48.212104Z"}]}}