CVE-2013-3838 - Unspecified vulnerability in Oracle SPARC Enterprise T & M Series Servers running Sun System Firmwar

CVE-2013-3838

Summary

Unspecified vulnerability in Oracle SPARC Enterprise T & M Series Servers running Sun System Firmware before 6.7.13 for SPARC T1, 7.4.6.c for SPARC T2, 8.3.0.b for SPARC T3 & T4, 9.0.0.d for SPARC T5 and 9.0.1.e for SPARC M5 allows local users to affect availability via unknown vectors related to Sun System Firmware/Hypervisor. Per: http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html "CVE-2013-3838 applies to Sun System Firmware before 6.7.13 for SPARC T1, 7.4.6.c for SPARC T2, 8.3.0.b for SPARC T3 & T4, 9.0.0.d for SPARC T5 and 9.0.1.e for SPARC M5."+

References

http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Vulnerable Configurations

cpe:2.3:o:oracle:sun_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:o:oracle:sun_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_enterprise_m8000_server:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_enterprise_m8000_server:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_enterprise_m9000_server:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_enterprise_m9000_server:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-1:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-1:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-1b:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-1b:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-2:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-2:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-3:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-3:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-4:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t3-4:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-1:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-1:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-1b:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-1b:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-2:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-2:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-4:-:*:*:*:*:*:*:*
cpe:2.3:h:oracle:sparc_t4-4:-:*:*:*:*:*:*:*

CVSS

Base:	4.0 (as of 16-10-2013 - 17:43)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	HIGH	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	COMPLETE

cvss-vector via4

AV:L/AC:H/Au:N/C:N/I:N/A:C

refmap via4

confirm

http://www.oracle.com/technetwork/topics/security/cpuoct2013-1899837.html

Last major update

16-10-2013 - 17:43

Published

16-10-2013 - 15:55

Last modified

16-10-2013 - 17:43