PT-2020-1348 · Oracle · Oracle Solaris

Marco Ivaldi · Published 2020-01-14 · Updated 2022-10-25 · CVE-2020-2696

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 10

Description The issue is related to a component of Oracle Solaris, specifically the Common Desktop Environment, which has inadequate access control. This allows a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris, potentially leading to a takeover of the system. The vulnerability can significantly impact additional products and may result in the loss of confidentiality, integrity, and availability.

Recommendations For Oracle Solaris version 10, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2020-00274

CVE-2020-2696

Affected Products

Oracle Solaris

References · 16

• 🔥 https://seclists.org/bugtraq/2020/Jan/22 · Exploit
• 🔥 http://packetstormsecurity.com/files/155963/SunOS-5.10-Generic_147148-26-Local-Privilege-Escalation.html · Exploit
• 🔥 http://seclists.org/fulldisclosure/2020/Jan/24 · Exploit
• 🔥 http://packetstormsecurity.com/files/155991/Common-Desktop-Environment-2.3.1-Buffer-Overflow.html · Exploit
• https://bdu.fstec.ru/vul/2020-00274 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-2696 · Security Note
• https://osv.dev/vulnerability/CVE-2020-2696 · Vendor Advisory
• https://oracle.com/security-alerts/cpujan2020.html · Vendor Advisory
• https://t.me/defcon_news/36240 · Telegram Post
• https://t.me/defcon_news/35895 · Telegram Post
• https://t.me/cybersecuritytechnologies/2629 · Telegram Post
• http://openwall.com/lists/oss-security/2020/01/20/2 · Note
• https://oracle.com/security-alerts/public-vuln-to-advisory-mapping.html · Note
• https://t.me/defcon_news/35630 · Telegram Post
• https://t.me/cybersecuritytechnologies/601 · Telegram Post