Lucene search

MitreCVE-2006-4319

HistoryAug 24, 2006 - 1:04 a.m.

CVE-2006-4319

2006-08-2401:04:00

mitre

web.nvd.nist.gov

cve-2006-4319

buffer overflow

solaris

format command

arbitrary code

vulnerability

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the “File System Management” RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.

Affected configurations

Nvd

Node

sunsolarisMatch8.0sparc

sunsolarisMatch8.0x86

sunsolarisMatch8.0beta

sunsolarisMatch9.0sparc

sunsolarisMatch9.0x86

sunsolarisMatch9.0x86_update_2

sunsolarisMatch10.064_bit

sunsolarisMatch10.0sparc

sunsolarisMatch10.0x86

sunsolarisMatch10.0hw2

sunsunosMatch5.8

sunsunosMatch5.9

sunsunosMatch5.10

VendorProductVersionCPE
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
sunsolaris8.0cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
sunsolaris9.0cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*
sunsolaris10.0cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*
sunsolaris10.0cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
sunsolaris10.0cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
sunsolaris10.0cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0::sparc:::::
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0::x86:::::
sun	solaris	8.0	cpe:2.3:o:sun:solaris:8.0:beta::::::
sun	solaris	9.0	cpe:2.3:o:sun:solaris:9.0::sparc:::::
sun	solaris	9.0	cpe:2.3:o:sun:solaris:9.0::x86:::::
sun	solaris	9.0	cpe:2.3:o:sun:solaris:9.0:x86_update_2::::::
sun	solaris	10.0	cpe:2.3:o:sun:solaris:10.0::64_bit:::::
sun	solaris	10.0	cpe:2.3:o:sun:solaris:10.0::sparc:::::
sun	solaris	10.0	cpe:2.3:o:sun:solaris:10.0::x86:::::
sun	solaris	10.0	cpe:2.3:o:sun:solaris:10.0:hw2::::::

Rows per page:

1-10 of 131

References

secunia.com/advisories/21581

secunia.com/advisories/22295

securitytracker.com/id?1016727

sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1

support.avaya.com/elmodocs2/security/ASA-2006-205.htm

www.securityfocus.com/bid/19657

www.vupen.com/english/advisories/2006/3355

exchange.xforce.ibmcloud.com/vulnerabilities/28519

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

Related for CVE-2006-4319