Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC). For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the vulnerability is in Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3623 is assigned for "Ebbisland". Solaris 10 systems which have had any Kernel patch installed after, or updated via patching tools since 2012-01-26 are not impacted. Also, any Solaris 10 system installed with Solaris 10 1/13 (Solaris 10 Update 11) are not vulnerable. Solaris 11 is not impacted by this issue. CVSS 3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3623 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3623 An unspecified vulnerability in Oracle Sun Systems related to the Solaris Kernel RPC component could allow an unauthenticated attacker to take control of the system.

Nessus was able to execute shellcode and run a system command on the remote Solaris host. Solaris 6, 7, 8, 9, and 10 are affected by a remote code execution vulnerability in the XDR RPC service due to an overflow condition caused by improper validation of user-supplied input when handling RPC requests. An unauthenticated, remote attacker can exploit this, via a specially crafted RPC request, to execute arbitrary code.

EBBISLAND / EBBSHAVE is one of multiple Equation Group vulnerabilities and exploits disclosed on 2017/04/08 by a group known as the Shadow Brokers.

ID	Name	Product	Family	Severity
119625	AIX 5.3 TL 12 : solaris (IJ10554)	Nessus	AIX Local Security Checks	critical
119624	AIX 7.2 TL 0 : solaris (IJ10553)	Nessus	AIX Local Security Checks	critical
119623	AIX 7.2 TL 1 : solaris (IJ10552)	Nessus	AIX Local Security Checks	critical
119622	AIX 7.1 TL 4 : solaris (IJ10275)	Nessus	AIX Local Security Checks	critical
119621	AIX 6.1 TL 9 : solaris (IJ10134)	Nessus	AIX Local Security Checks	critical
119620	AIX 7.1 TL 5 : solaris (IJ10132)	Nessus	AIX Local Security Checks	critical
119619	AIX 7.2 TL 2 : solaris (IJ10130)	Nessus	AIX Local Security Checks	critical
119618	AIX 7.2 TL 3 : solaris (IJ09805)	Nessus	AIX Local Security Checks	critical
103532	Solaris XDR RPC Request Handling RCE (April 2017 CPU) (EBBISLAND / EBBSHAVE)	Nessus	RPC	critical

Detections

Analytics

CVE-2017-3623

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical