Detections
Analytics
Oracle Solaris Critical Patch Update : jan2015_SRU11_1_15_4_0
medium Nessus Plugin ID 80937
Language:
Synopsis
The remote Solaris system is missing a security patch from CPU jan2015.Description
This Solaris system is missing necessary patches to address critical security updates :- Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network).
Supported versions that are affected are 10 and 11.
Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. (CVE-2004-0230)
- Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network).
Supported versions that are affected are 10 and 11.
Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris. (CVE-2014-6575)
Solution
Install the jan2015 CPU from the Oracle support website.See Also
https://support.oracle.com/epmos/faces/DocumentDisplay?id=1956176.1
Plugin Details
Severity: Medium
ID: 80937
File Name: solaris_jan2015_SRU11_1_15_4_0.nasl
Version: 1.12
Type: local
Family: Solaris Local Security Checks
Published: 1/23/2015
Updated: 8/11/2022
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
Vulnerability Information
CPE: cpe:/o:oracle:solaris:11.1
Required KB Items: Host/local_checks_enabled, Host/Solaris11/release
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 1/20/2015
Vulnerability Publication Date: 8/18/2004
Reference Information
CVE: CVE-2004-0230, CVE-2014-6575