ID CVE-2007-2990
Summary Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (daemon termination) via unspecified manipulations of the /var/run/.inetd.uds Unix domain socket file.
References
Vulnerable Configurations
  • cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
    cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
  • cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
    cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
CVSS
Base: 4.9 (as of 11-10-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
LOCAL LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE COMPLETE
cvss-vector via4 AV:L/AC:L/Au:N/C:N/I:N/A:C
oval via4
accepted 2010-09-20T04:00:19.273-04:00
class vulnerability
contributors
  • name Pai Peng
    organization Opsware, Inc.
  • name Jonathan Baker
    organization The MITRE Corporation
description Unspecified vulnerability in inetd in Sun Solaris 10 before 20070529 allows local users to cause a denial of service (daemon termination) via unspecified manipulations of the /var/run/.inetd.uds Unix domain socket file.
family unix
id oval:org.mitre.oval:def:2032
status accepted
submitted 2007-06-06T11:47:00.000-04:00
title A Security Vulnerability in the Solaris 10 inetd(1M) Service May Lead to a Denial of Service (DoS) Condition
version 37
refmap via4
bid 24213
osvdb 36585
sectrack 1018133
secunia 25450
sunalert 102921
vupen ADV-2007-1984
xf solaris-inetd-dos(34577)
Last major update 11-10-2017 - 01:32
Published 01-06-2007 - 10:30
Last modified 11-10-2017 - 01:32
Back to Top