PT-2010-2315 · Oracle+1 · Oracle Opensolaris+1

Published 2010-02-05 · Updated 2017-08-17 · CVE-2010-0558

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle OpenSolaris versions snv 77 through snv 131

Description The default configuration of Oracle OpenSolaris allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain.

Recommendations For Oracle OpenSolaris versions snv 77 through snv 131, consider reconfiguring the system to avoid using the default settings that allow attackers to exploit the issue via smbadm when joining a Windows Active Directory domain. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2010-0558

Affected Products

Oracle Opensolaris

Windows Active Directory

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-0558 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-275790-1 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/56521 · Note
• http://securitytracker.com/id?1023545 · Note