Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. CVSS 3.0 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Solaris accessible data.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11. Easily     exploitable vulnerability allows high privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in takeover of Solaris.
    (CVE-2017-10004)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks require human     interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in     unauthorized update, insert or delete access to some of     Solaris accessible data. (CVE-2017-10122)

ID	Name	Product	Family	Severity
108202	Solaris 10 (x86) : 150401-53	Nessus	Solaris Local Security Checks	medium
108201	Solaris 10 (x86) : 150401-52	Nessus	Solaris Local Security Checks	medium
108200	Solaris 10 (x86) : 150401-51	Nessus	Solaris Local Security Checks	medium
107721	Solaris 10 (sparc) : 150400-53	Nessus	Solaris Local Security Checks	medium
107720	Solaris 10 (sparc) : 150400-52	Nessus	Solaris Local Security Checks	medium
107719	Solaris 10 (sparc) : 150400-51	Nessus	Solaris Local Security Checks	medium
101803	Oracle Solaris Critical Patch Update : jul2017_SRU11_3_21_5_0	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2017-10004

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium

medium