ID CVE-2012-3206
Summary Unspecified vulnerability in the Integrated Lights Out Manager CLI in Oracle Sun Products Suite SysFW 8.2.0.a for SPARC and Netra SPARC T3 and T4-based servers, and other versions and servers, allows local users to affect confidentiality via unknown vectors. Per: www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html "Specific products affected by CVE-2012-3206 are: SPARC T3-1, SPARC T3-2, SPARC T3-4, SPARC T3-1B, Netra SPARC T3-1, Netra SPARC T3-1B, SPARC T4-1, SPARC T4-2, SPARC T4-4, SPARC T4-1B, Netra SPARC T4-1, Netra SPARC T4-2, Netra SPARC T4-2B"
References
Vulnerable Configurations
  • cpe:2.3:o:oracle:sun_products_suite_sysfw:8.2.0.a:*:*:*:*:*:*:*
    cpe:2.3:o:oracle:sun_products_suite_sysfw:8.2.0.a:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:netra_sparc_t3-1:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:netra_sparc_t3-1:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:netra_sparc_t3-1b:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:netra_sparc_t3-1b:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:netra_sparc_t4-1:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:netra_sparc_t4-1:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:netra_sparc_t4-2:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:netra_sparc_t4-2:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:netra_sparc_t4-2b:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:netra_sparc_t4-2b:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_t3-1:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_t3-1:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_t3-1b:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_t3-1b:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_t3-2:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_t3-2:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_t3-4:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_t3-4:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_t4-1:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_t4-1:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_t4-1b:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_t4-1b:-:*:*:*:*:*:*:*
  • cpe:2.3:h:oracle:sparc_t4-4:-:*:*:*:*:*:*:*
    cpe:2.3:h:oracle:sparc_t4-4:-:*:*:*:*:*:*:*
CVSS
Base: 2.1 (as of 11-10-2013 - 03:44)
Impact:
Exploitability:
CWE NVD-CWE-noinfo
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
cvss-vector via4 AV:L/AC:L/Au:N/C:P/I:N/A:N
refmap via4
confirm http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
mandriva MDVSA-2013:150
Last major update 11-10-2013 - 03:44
Published 17-10-2012 - 00:55
Last modified 11-10-2013 - 03:44
Back to Top