PT-2016-1073 · Oracle · Solaris

Published 2016-01-19 · Updated 2016-12-07 · CVE-2016-0416

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Sun Solaris version 11

Description The issue is related to errors in the code of the System Archive Utility component of the Solaris operating system. It may allow a remote attacker to modify, add, or delete data using network packets, thus affecting the integrity of the system.

Recommendations For Oracle Sun Solaris version 11, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2016-00143

CVE-2016-0416

Affected Products

Solaris

References · 5

• http://oracle.com/technetwork/topics/security/cpujan2016-2367955.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00143 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-0416 · Security Note
• https://osv.dev/vulnerability/CVE-2016-0416 · Vendor Advisory
• http://securitytracker.com/id/1034735 · Note