Lucene search

MitreCVE-2007-6413

HistoryDec 17, 2007 - 11:46 p.m.

CVE-2007-6413

2007-12-1723:46:00

CWE-264

mitre

web.nvd.nist.gov

cve-2007-6413

sun solaris 10

120011-04

120012-04

netgroup restrictions

nfs

remote attackers

security vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

84.5%

JSON

Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches, allows remote attackers to bypass certain netgroup restrictions and obtain root access to a filesystem via NFS requests from a client root user.

Affected configurations

Nvd

Node

sunsolarisMatch10sparc

sunsolarisMatch10x86

VendorProductVersionCPE
sunsolaris10cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*
sunsolaris10cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*

Vendor	Product	Version	CPE
sun	solaris	10	cpe:2.3:o:sun:solaris:10::sparc:::::
sun	solaris	10	cpe:2.3:o:sun:solaris:10::x86:::::

References

osvdb.org/40829

secunia.com/advisories/28096

sunsolve.sun.com/search/document.do?assetkey=1-26-103162-1

sunsolve.sun.com/search/document.do?assetkey=1-66-201317-1

www.securityfocus.com/bid/26872

www.securitytracker.com/id?1019102

www.vupen.com/english/advisories/2007/4218

exchange.xforce.ibmcloud.com/vulnerabilities/39033

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

84.5%

JSON

Related for CVE-2007-6413