Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.

SunOS 5.9_x86: format, lp, IKE patch.
Date this patch was last updated by Sun : Mar/18/11

SunOS 5.10_x86: format patch.
Date this patch was last updated by Sun : Aug/21/06

SunOS 5.9: patch /usr/sbin/format.
Date this patch was last updated by Sun : Jul/21/06

SunOS 5.10: kernel patch.
Date this patch was last updated by Sun : Jan/29/07

This plugin has been deprecated and either replaced with individual 118833 patch-revision plugins, or deemed non-security related.

SunOS 5.8_x86: /usr/bin/rmformat and /usr/sbin/format patch.
Date this patch was last updated by Sun : Aug/18/06

SunOS 5.8: /usr/bin/rmformat and /usr/sbin/format patch.
Date this patch was last updated by Sun : Aug/10/06

ID	Name	Product	Family	Severity
22248	Solaris 9 (x86) : 114423-09	Nessus	Solaris Local Security Checks	critical
22245	Solaris 10 (x86) : 118997-10	Nessus	Solaris Local Security Checks	high
22157	Solaris 9 (sparc) : 113072-08	Nessus	Solaris Local Security Checks	high
21792	Solaris 10 (sparc) : 118833-36 (deprecated)	Nessus	Solaris Local Security Checks	high
13415	Solaris 8 (x86) : 108976-10	Nessus	Solaris Local Security Checks	high
13304	Solaris 8 (sparc) : 108975-10	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2006-4319

high

Tenable Plugins

critical

high

high

high

high

high