MitreCVE-2007-3471CVE-2007-3471
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
13.2%
Buffer overflow in the dtsession Common Desktop Environment (CDE) Session Manager in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via unspecified vectors.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sun | solaris | 8.0 | cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:* |
| sun | solaris | 8.0 | cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:* |
| sun | solaris | 9.0 | cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:* |
| sun | solaris | 9.0 | cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:* |
| sun | solaris | 10.0 | cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:* |
| sun | solaris | 10.0 | cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:* |
References
osvdb.org/36608
secunia.com/advisories/25876
secunia.com/advisories/26136
sunsolve.sun.com/search/document.do?assetkey=1-26-102954-1
support.avaya.com/elmodocs2/security/ASA-2007-310.htm
www.securityfocus.com/bid/24687
www.vupen.com/english/advisories/2007/2369
exchange.xforce.ibmcloud.com/vulnerabilities/35127
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2015
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
High
EPSS
Percentile
13.2%