PT-2017-2612 · Oracle · Solaris

Published 2017-07-18 · Updated 2019-10-03 · CVE-2017-10004

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle Sun Systems Products Suite (subcomponent: Kernel) versions 10 and 11

Description The issue is related to inadequate access control in the Solaris operating system's kernel component. Exploitation of this issue can allow an attacker with high privileges and local access to gain control over the system, potentially compromising all resources of the operating system. The attacker must have privileged access to the infrastructure where the Solaris operating system is running.

Recommendations For versions 10 and 11, there is no information about a newer version that contains a fix for this issue.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2017-01830

BDU:2017-02069

CVE-2017-10004

Affected Products

Solaris

References · 7

• https://bdu.fstec.ru/vul/2017-01830 · Security Note
• http://oracle.com/technetwork/security-advisory/cpujul2017-3236622.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-02069 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2017-10004 · Security Note
• https://osv.dev/vulnerability/CVE-2017-10004 · Vendor Advisory
• http://securitytracker.com/id/1038938 · Note
• http://securityfocus.com/bid/99843 · Note