CVE-2010-3507

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade.

CVSS v2.0 6.6 MEDIUM

6.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:M/Au:N/C:P/I:C/A:C

Exploitability : 3.4 / Impact : 9.5

Access Vector LOCAL

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
http://www.us-cert.gov/cas/techalerts/TA10-287A.html	US Government Resource
http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
http://www.us-cert.gov/cas/techalerts/TA10-287A.html	US Government Resource

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:oracle:solaris:8:::::::*
	cpe:2.3:o:oracle:solaris:9:::::::*
	cpe:2.3:o:oracle:solaris:10:::::::*

History

21 Nov 2024, 01:18

Type	Values Removed	Values Added
References	~~() http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html -~~	() http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html -
References	~~() http://www.us-cert.gov/cas/techalerts/TA10-287A.html - US Government Resource~~	() http://www.us-cert.gov/cas/techalerts/TA10-287A.html - US Government Resource

Information

Published : 2010-10-14 02:00

Updated : 2024-11-21 01:18

NVD link : CVE-2010-3507

Mitre link : CVE-2010-3507

CVE.ORG link : CVE-2010-3507

JSON object : View

Products Affected

oracle

solaris

CWE

NVD-CWE-noinfo

{"id": "CVE-2010-3507", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:M/Au:N/C:P/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 9.5, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.4, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-10-14T02:00:02.993", "references": [{"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "source": "secalert_us@oracle.com"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html", "tags": ["US Government Resource"], "source": "secalert_us@oracle.com"}, {"url": "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-287A.html", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade."}, {"lang": "es", "value": "Vulnerabilidad no especificada en Oracle Solaris v8, v9 y v10 permite a usuarios locales afectar a la confidencialidad, integridad y disponibilidad a trav\u00e9s de vectores desconocidos relacionados con Live Upgrade."}], "lastModified": "2024-11-21T01:18:53.527", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:oracle:solaris:8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "722A52CF-4C6E-44D3-90C4-D2F72A40EF58"}, {"criteria": "cpe:2.3:o:oracle:solaris:9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F864AD7-53A2-4225-870F-062876CE45DD"}, {"criteria": "cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "964B57CD-CB8A-4520-B358-1C93EC5EF2DC"}], "operator": "OR"}]}], "sourceIdentifier": "secalert_us@oracle.com"}