4.9

CVE-2006-3824

Exploit
systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function.  NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Solaris Version10.0 Editionsparc
Sun ≫ Solaris Version10.0 Editionx86
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.99% 0.578
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.9 3.9 6.9
AV:L/AC:L/Au:N/C:C/I:N/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/21148
http://securitytracker.com/id?1016555
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102343-1
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=410
http://www.securityfocus.com/archive/1/440849/100/100/threaded
http://www.securityfocus.com/archive/1/440986/100/100/threaded
http://www.securityfocus.com/bid/19104
Patch
Exploit
http://www.vupen.com/english/advisories/2006/2936
https://exchange.xforce.ibmcloud.com/vulnerabilities/27901