PT-2017-1980 · Oracle+1 · Solaris+1
Publicado
2017-04-24
·
Atualizado
2019-10-03
·
CVE-2017-3623
CVSS v2.0
10
Alta
| Vetor | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Oracle Sun Systems Products Suite (subcomponent: Kernel RPC) versions prior to the version with the Kernel patch installed after 2012-01-26
Oracle Sun Systems Products Suite (subcomponent: Kernel RPC) versions prior to Solaris 10 1/13 (Solaris 10 Update 11)
Description
The issue is related to inadequate access control in the Solaris Kernel RPC component, allowing an unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks can result in the takeover of Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products.
Recommendations
For Oracle Sun Systems Products Suite versions prior to the version with the Kernel patch installed after 2012-01-26, update to a version with the Kernel patch installed after 2012-01-26 to resolve the issue.
For Oracle Sun Systems Products Suite versions prior to Solaris 10 1/13 (Solaris 10 Update 11), update to Solaris 10 1/13 (Solaris 10 Update 11) or later to resolve the issue.
As a temporary workaround, consider restricting network access to the Solaris Kernel RPC component until a patch is available.
Exploit
Correção
Improper Access Control
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Ibm Aix
Solaris