CVE-2007-3093 - Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solari

CVE-2007-3093

Summary

Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary code via unspecified vectors, related to the WBEM server.

References

Vulnerable Configurations

cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*

CVSS

Base:	10.0 (as of 30-10-2018 - 16:25)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:N/C:C/I:C/A:C

oval via4

accepted

2007-07-11T15:17:32.331-04:00

class

vulnerability

contributors

name	Pai Peng
organization	Opsware, Inc.

description

family

unix

oval:org.mitre.oval:def:1680

status

accepted

submitted

2007-06-08T14:30:00.000-04:00

title

Security Vulnerability in the Logging Mechanism for Solaris Management Console (SMC) May Lead to Escalation of Privileges

version

refmap via4

bid	24327
osvdb	36590
sectrack	1018206
secunia	25566
sunalert	102903
vupen	ADV-2007-2077
xf	solaris-smc-logging-privilege-escalation(34734)

Last major update

30-10-2018 - 16:25

Published

06-06-2007 - 21:30

Last modified

30-10-2018 - 16:25