PT-2003-2017 · Oracle · Solaris

Published 2003-10-27 · Updated 2018-10-30 · CVE-2003-1060

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Solaris versions 7 through 9

Description The issue allows remote attackers to cause a denial of service, resulting in a UFS panic, via certain invalid UFS requests. This is triggered by a null dereference.

Recommendations For Solaris versions 7 through 9, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-2003-1060

Affected Products

Solaris

References · 4

• http://securityfocus.com/bid/8929 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-57406-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2003-1060 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/13547 · Note