ID CVE-2010-3503
Summary Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.
References
Vulnerable Configurations
  • cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*
    cpe:2.3:o:oracle:opensolaris:*:*:*:*:*:*:*:*
  • cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
    cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
CVSS
Base: 6.3 (as of 11-11-2010 - 06:50)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE NONE
cvss-vector via4 AV:L/AC:M/Au:N/C:C/I:C/A:N
refmap via4
cert TA10-287A
confirm http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
Last major update 11-11-2010 - 06:50
Published 14-10-2010 - 02:00
Last modified 11-11-2010 - 06:50
Back to Top