PT-2006-5948 · Sun · Sun Solaris 10

Published 2006-10-09 · Updated 2017-07-20 · CVE-2006-5213

Positive Technologies (AI Summary)

CVSS v2.0

3.6

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Sun Solaris 10 versions prior to 20061006

Description The issue is related to incorrect and insufficient permission checks, allowing local users to intercept or spoof packets by creating a raw socket on a link aggregation (network device aggregation).

Recommendations For Sun Solaris 10 versions prior to 20061006, update to a version released after 20061006 to resolve the issue.

Fix

Related Identifiers

CVE-2006-5213

Affected Products

Sun Solaris 10

References · 9

• http://securityfocus.com/bid/20377 · Patch
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102606-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5213 · Security Note
• http://secunia.com/advisories/22246 · Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2006-250.htm · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29381 · Note
• http://vupen.com/english/advisories/2006/3961 · Note
• http://securitytracker.com/id?1017013 · Note
• http://secunia.com/advisories/22992 · Note