ID CVE-2011-2299
Summary Unspecified vulnerability in Oracle SPARC Enterprise M3000, M4000, M5000, M8000, and M9000 XCP 1101 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to XSCF Control Package (XCP).
References
Vulnerable Configurations
  • cpe:2.3:a:oracle:xcp:*:*:*:*:*:*:*:*
    cpe:2.3:a:oracle:xcp:*:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_enterprise_m3000_server:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_enterprise_m3000_server:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_enterprise_m4000_server:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_enterprise_m4000_server:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_enterprise_m5000_server:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_enterprise_m5000_server:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_enterprise_m8000_server:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_enterprise_m8000_server:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_enterprise_m9000_server:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_enterprise_m9000_server:-:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 05-10-2011 - 02:54)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
cert TA11-201A
confirm http://www.oracle.com/technetwork/topics/security/cpujuly2011-313328.html
Last major update 05-10-2011 - 02:54
Published 21-07-2011 - 00:55
Last modified 05-10-2011 - 02:54
Back to Top