CVE-2006-4319

Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.

CVSS v2.0 7.2 HIGH

7.2^/10

CVSS v2.0 : HIGH

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/21581	Patch Vendor Advisory
http://secunia.com/advisories/22295
http://securitytracker.com/id?1016727
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1	Patch
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
http://www.securityfocus.com/bid/19657
http://www.vupen.com/english/advisories/2006/3355
https://exchange.xforce.ibmcloud.com/vulnerabilities/28519
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:sun:solaris:8.0::sparc:::::
	cpe:2.3:o:sun:solaris:8.0::x86:::::
	cpe:2.3:o:sun:solaris:8.0:beta::::::
	cpe:2.3:o:sun:solaris:9.0::sparc:::::
	cpe:2.3:o:sun:solaris:9.0::x86:::::
	cpe:2.3:o:sun:solaris:9.0:x86_update_2::::::
	cpe:2.3:o:sun:solaris:10.0::64_bit:::::
	cpe:2.3:o:sun:solaris:10.0::sparc:::::
	cpe:2.3:o:sun:solaris:10.0::x86:::::
	cpe:2.3:o:sun:solaris:10.0:hw2::::::
	cpe:2.3:o:sun:sunos:5.8:::::::*
	cpe:2.3:o:sun:sunos:5.9:::::::*
	cpe:2.3:o:sun:sunos:5.10:::::::*

History

No history.

Information

Published : 2006-08-24 01:04

Updated : 2018-10-30 16:26

NVD link : CVE-2006-4319

Mitre link : CVE-2006-4319

CVE.ORG link : CVE-2006-4319

JSON object : View

Products Affected

sun

solaris
sunos

CWE

NVD-CWE-Other

{"id": "CVE-2006-4319", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.2, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2006-08-24T01:04:00.000", "references": [{"url": "http://secunia.com/advisories/21581", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/22295", "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1016727", "source": "cve@mitre.org"}, {"url": "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/19657", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2006/3355", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28519", "source": "cve@mitre.org"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the \"File System Management\" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en el comando format en Solaris 8, 9, y 10 permite a usuarios locales con acceso a format (tales y como el perfil RBAC \"File System Management\") ejecutar c\u00f3digo de su elecci\u00f3n a trav\u00e9s de vectores desconocidos, una vulnerabilidad distinta de CVE-2006-4307."}], "lastModified": "2018-10-30T16:26:23.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32CF7469-6D2F-4E34-8013-7F0D3433D0B2"}, {"criteria": "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1894C542-AA81-40A9-BF47-AE24C93C1ACB"}, {"criteria": "cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11847B60-D66B-4386-940A-C53B11853E50"}, {"criteria": "cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A711CDC2-412C-499D-9FA6-7F25B06267C6"}, {"criteria": "cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B837BB7-5F62-4CD5-9C64-8553C28EA8A7"}, {"criteria": "cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F305CBD-4329-44DE-A85C-DE9FF371425E"}, {"criteria": "cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "63874B2D-AD5D-4BB4-A83B-7B717E570191"}, {"criteria": "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7BF232A9-9E0A-481E-918D-65FC82EF36D8"}, {"criteria": "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0C0C3793-E011-4915-8F86-CE622A2D37D1"}, {"criteria": "cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DBEB91FE-FB39-4AB2-8172-2A47EC59861B"}, {"criteria": "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2475113-CFE4-41C8-A86F-F2DA6548D224"}, {"criteria": "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF"}, {"criteria": "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}