Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Filesystem.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Automated     Installer). The supported version that is affected is     11.3. Easily exploitable vulnerability allows     unauthenticated attacker with network access via     multiple protocols to compromise Solaris. Successful     attacks require human interaction from a person other     than the attacker and while the vulnerability is in     Solaris, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Solaris accessible data. (CVE-2016-0623)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: PAM LDAP module).
    Supported versions that are affected are 10 and 11.3.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Solaris. Successful attacks of this     vulnerability can result in takeover of Solaris.
    (CVE-2016-0693)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Filesystem).
    Supported versions that are affected are 10 and 11.3.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2016-3419)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Filesystem).
    Supported versions that are affected are 10 and 11.3.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in takeover of Solaris.
    (CVE-2016-3441)

ID	Name	Product	Family	Severity
108196	Solaris 10 (x86) : 150401-35	Nessus	Solaris Local Security Checks	high
107715	Solaris 10 (sparc) : 150400-35	Nessus	Solaris Local Security Checks	high
90620	Oracle Solaris Critical Patch Update : apr2016_SRU11_3_5_6_0	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2016-3441

high

Tenable Plugins

high

high

critical