CVE-2007-3094 - Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun

CVE-2007-3094

Summary

Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server.

References

Vulnerable Configurations

cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*
cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*

CVSS

Base:	9.0 (as of 30-10-2018 - 16:25)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:S/C:C/I:C/A:C

oval via4

accepted

2007-07-11T15:17:31.878-04:00

class

vulnerability

contributors

name	Pai Peng
organization	Opsware, Inc.

description

family

unix

oval:org.mitre.oval:def:1341

status

accepted

submitted

2007-06-08T14:30:00.000-04:00

title

Security Vulnerability in the Authentication Mechanism for Solaris Management Console (SMC) May Lead to Escalation of Privileges

version

refmap via4

bid	24326
osvdb	36591
sectrack	1018205
sunalert	102902
vupen	ADV-2007-2076
xf	solaris-smc-authentication-priv-escalation(34735)

Last major update

30-10-2018 - 16:25

Published

06-06-2007 - 21:30

Last modified

30-10-2018 - 16:25