Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Zone). The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data. CVSS 3.0 Base Score 3.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Zone). The     supported version that is affected is 11.3. Easily     exploitable vulnerability allows low privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized read access to     a subset of Solaris accessible data. (CVE-2017-3474)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Remote     Administration Daemon). The supported version that is     affected is 11.3. Easily exploitable vulnerability     allows unauthenticated attacker with network access via     multiple protocols to compromise Solaris. Successful     attacks of this vulnerability can result in unauthorized     update, insert or delete access to some of Solaris     accessible data as well as unauthorized read access to a     subset of Solaris accessible data and unauthorized     ability to cause a partial denial of service (partial     DOS) of Solaris. (CVE-2017-3497)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Smartcard     Libraries). The supported version that is affected is     11.3. Easily exploitable vulnerability allows low     privileged attacker with logon to the infrastructure     where Solaris executes to compromise Solaris. Successful     attacks of this vulnerability can result in unauthorized     ability to cause a hang or frequently repeatable crash     (complete DOS) of Solaris as well as unauthorized     update, insert or delete access to some of Solaris     accessible data and unauthorized read access to a subset     of Solaris accessible data. (CVE-2017-3551)

Detections

Analytics

CVE-2017-3474

low

Tenable Plugins

high