Oracle Solaris Multiple Vulnerabilities
RISK: High Risk
TYPE: Operating Systems - Sun Solaris
Multiple vulnerabilities have been identified in Oracle Solaris, which could be exploited by attackers or malicious users to cause a denial of service, gain knowledge of sensitive information or take complete control of a vulnerable system. These issues are caused by errors in the RPC CDE Calendar Manager Service Daemon, FTP Server, SMB CIFS, Ethernet Driver, Kernel/NFS, SCTP Kernel/sockfs, RDS Kernel/InfiniBand, Kernel, libc, ZFS, Fault Manager Daemon and XScreenSaver.
Impact
- Denial of Service
- Elevation of Privilege
- Remote Code Execution
- Information Disclosure
System / Technologies affected
- Oracle Solaris 8
- Oracle Solaris 9
- Oracle Solaris 10
- Oracle Solaris 11 Express
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Apply Oracle Critical Patch Update - January 2011 :
http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html
Vulnerability Identifier
- No CVE information is available
Source
Related Link
Share with