PT-2006-4814 · Sun · Sun Solaris

Published 2006-08-01 · Updated 2017-07-20 · CVE-2006-3968

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 3/05 HW2 without patch 121236-01

Description The issue is related to the crypto provider in Sun Solaris, which incorrectly verifies a DSA signature when running on specific hardware platforms. This might prevent applications from detecting data modifications.

Recommendations For Sun Solaris version 10 3/05 HW2, apply patch 121236-01 to resolve the issue.

Fix

Related Identifiers

CVE-2006-3968

Affected Products

Sun Solaris

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2006-3968 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102543-1 · Patch, Vendor Advisory
• http://securityfocus.com/bid/19291 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/28201 · Note
• http://securitytracker.com/id?1016625 · Note
• http://secunia.com/advisories/21279 · Note
• http://vupen.com/english/advisories/2006/3103 · Note