PT-2017-2612 · Oracle · Solaris

Publicado 2017-07-18 · Atualizado 2019-10-03 · CVE-2017-10004

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite (subcomponent: Kernel) versions 10 and 11

Description The issue is related to inadequate access control in the Solaris operating system's kernel component. Exploitation of this issue can allow an attacker with high privileges and local access to gain control over the system, potentially compromising all resources of the operating system. The attacker must have privileged access to the infrastructure where the Solaris operating system is running.

Recommendations For versions 10 and 11, there is no information about a newer version that contains a fix for this issue.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2017-01830

BDU:2017-02069

CVE-2017-10004

Produtos afetados

Solaris

Referências · 7

• https://bdu.fstec.ru/vul/2017-01830 · Nota de Segurança
• http://oracle.com/technetwork/security-advisory/cpujul2017-3236622.html · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-02069 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2017-10004 · Nota de Segurança
• http://securitytracker.com/id/1038938 · Nota
• https://osv.dev/vulnerability/CVE-2017-10004 · Aviso do Fabricante
• http://securityfocus.com/bid/99843 · Nota