7.2

CVE-2006-4319

Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sun ≫ Solaris Version 8.0 Edition sparc
Sun ≫ Solaris Version 8.0 Edition x86
Sun ≫ Solaris Version 8.0 Update beta
Sun ≫ Solaris Version 9.0 Edition sparc
Sun ≫ Solaris Version 9.0 Edition x86
Sun ≫ Solaris Version 9.0 Update x86_update_2
Sun ≫ Solaris Version 10.0 Edition 64_bit
Sun ≫ Solaris Version 10.0 Edition sparc
Sun ≫ Solaris Version 10.0 Edition x86
Sun ≫ Solaris Version 10.0 Update hw2
Sun ≫ Sunos Version 5.8
Sun ≫ Sunos Version 5.9
Sun ≫ Sunos Version 5.10
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.48% 0.386
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
http://secunia.com/advisories/21581
Patch
Vendor Advisory
http://secunia.com/advisories/22295
http://www.vupen.com/english/advisories/2006/3355
http://securitytracker.com/id?1016727
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1
Patch
http://www.securityfocus.com/bid/19657
https://exchange.xforce.ibmcloud.com/vulnerabilities/28519
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164