PT-2010-2316 · Oracle+1 · Oracle Opensolaris+1

Published 2010-02-05 · Updated 2010-05-25 · CVE-2010-0559

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Oracle OpenSolaris versions snv 91 through snv 131

Description The default configuration of Oracle OpenSolaris allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.

Recommendations For Oracle OpenSolaris versions snv 91 through snv 131, consider reconfiguring the system to avoid using kclient for joining a Windows Active Directory domain until a proper fix is available.

Fix

Weakness Enumeration

CWE-16

Related Identifiers

CVE-2010-0559

Affected Products

Oracle Opensolaris

Windows Active Directory

References · 4

• http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021793.1-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-0559 · Security Note
• http://sunsolve.sun.com/search/document.do?assetkey=1-66-275790-1 · Vendor Advisory
• http://securitytracker.com/id?1023545 · Note