PT-2007-3789 · Sun · Sun Solaris

Publicado 2007-05-02 · Atualizado 2018-10-30 · CVE-2007-2465

Positive Technologies (AI Summary)

CVSS v2.0

4.7

Média

Vetor base

AV:L/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Sun Solaris version 9

Description The issue allows local users to cause a denial of service, resulting in a system panic, when Solaris Auditing (BSM) is enabled for certain audit classes, such as file read, write, attribute modify, create, or delete. The exact vectors are unknown, but it may be related to the audit savepath function.

Recommendations For Sun Solaris version 9, consider disabling Solaris Auditing (BSM) for the affected audit classes as a temporary workaround to minimize the risk of denial of service attacks. Restrict access to the audit savepath function until a patch is available.

Correção

Identificadores relacionados

CVE-2007-2465

Produtos afetados

Sun Solaris

Referências · 9

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1085 · Nota
• http://securityfocus.com/bid/23751 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34003 · Nota
• http://osvdb.org/34904 · Nota
• http://securitytracker.com/id?1017992 · Correção
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102900-1 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/1611 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2465 · Nota de Segurança
• http://secunia.com/advisories/25081 · Aviso do Fabricante