CVE-2015-4920 - Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vector

CVE-2015-4920

Summary

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vectors related to NDMP Backup Service. Per Oracle: Unsupported Solaris 11.x versions should be upgraded to a supported release or patch set. Refer to the Critical Patch Update January 2015 Patch Availability Document for Oracle Sun Systems Products Suite.

References

http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
http://www.securitytracker.com/id/1034735

Vulnerable Configurations

cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*
cpe:2.3:o:oracle:solaris:11:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 07-12-2016 - 18:15)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	PARTIAL	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:N/I:P/A:N

refmap via4

confirm	http://www.oracle.com/technetwork/topics/security/cpujan2016-2367955.html
sectrack	1034735

Last major update

07-12-2016 - 18:15

Published

21-01-2016 - 02:59

Last modified

07-12-2016 - 18:15