Published: 23/07/2019 Updated: 24/08/2020

CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9

CVSS v3 Base Score: 8.8 | Impact Score: 6 | Exploitability Score: 2

VMScore: 409

Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).

Vulnerable Product	Search on Vulmon	Subscribe to Product
oracle solaris 10

Full Disclosure mailing list archives   By Date By Thread </form>    Re: local privilege escalation via CDE dtprintinfo   From: Marco ...

#INFILTRATE19 raptor's party pack.

raptor_infiltrate19 "Sometimes, hacking is just someone spending more time on something than anyone else might reasonably expect" -- Jerry Gamblin This repository contains all materials related to my talk "A bug's life: story of a Solaris 0day" presented at #INFILTRATE19 on May 2, 2019 Related links: webarchiveorg/web/20200518045907/h

NVD-CWE-noinfo http://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html https://nvd.nist.gov https://github.com/0xdea/raptor_infiltrate19 http://seclists.org/fulldisclosure/2019/Jul/19

CVE-2019-2832

Vulnerability Summary

Vulnerability Trend

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect