{"id": "CVE-2003-1072", "bulletinFamily": "NVD", "title": "CVE-2003-1072", "description": "Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption).", "published": "2003-04-28T04:00:00", "modified": "2018-10-30T16:25:00", "cvss": {"score": 2.1, "vector": "AV:L/AC:L/Au:N/C:N/I:N/A:P"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2003-1072", "reporter": "cve@mitre.org", "references": ["http://secunia.com/advisories/8686/", "http://www.securityfocus.com/bid/7454", "http://sunsolve.sun.com/search/document.do?assetkey=1-26-54100-1", "https://exchange.xforce.ibmcloud.com/vulnerabilities/11895"], "cvelist": ["CVE-2003-1072"], "type": "cve", "lastseen": "2020-10-03T11:33:03", "edition": 3, "viewCount": 1, "enchantments": {"dependencies": {"references": [{"type": "openvas", "idList": ["OPENVAS:1361412562310855349", "OPENVAS:855349"]}, {"type": "osvdb", "idList": ["OSVDB:15135"]}], "modified": "2020-10-03T11:33:03", "rev": 2}, "score": {"value": 3.6, "vector": "NONE", "modified": "2020-10-03T11:33:03", "rev": 2}, "vulnersScore": 3.6}, "cpe": ["cpe:/o:sun:solaris:8.0", "cpe:/o:sun:sunos:5.8"], "affectedSoftware": [{"cpeName": "sun:solaris", "name": "sun solaris", "operator": "eq", "version": "8.0"}, {"cpeName": "sun:sunos", "name": "sun sunos", "operator": "eq", "version": "5.8"}], "cvss2": {"cvssV2": {"accessComplexity": "LOW", "accessVector": "LOCAL", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 2.1, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 3.9, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "severity": "LOW", "userInteractionRequired": false}, "cvss3": {}, "cpe23": ["cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*", "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*"], "cwe": ["NVD-CWE-Other"], "scheme": null, "cpeConfiguration": {"CVE_data_version": "4.0", "nodes": [{"cpe_match": [{"cpe23Uri": "cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*", "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*", "vulnerable": true}], "operator": "OR"}]}}

{"openvas": [{"lastseen": "2018-04-09T11:38:33", "bulletinFamily": "scanner", "cvelist": ["CVE-2003-1072"], "description": "Check for the Version of /kernel/drv/lofi drivers and /usr/sbin/lofiadm", "modified": "2018-04-06T00:00:00", "published": "2009-06-03T00:00:00", "id": "OPENVAS:1361412562310855349", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310855349", "type": "openvas", "title": "Solaris Update for /kernel/drv/lofi drivers and /usr/sbin/lofiadm 114162-01", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Solaris Update for /kernel/drv/lofi drivers and /usr/sbin/lofiadm 114162-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ntag_affected = \"/kernel/drv/lofi drivers and /usr/sbin/lofiadm on solaris_5.8_sparc\";\ntag_insight = \"The remote host is missing a patch containing a security fix,\n which affects the following component(s): \n /kernel/drv/lofi drivers and /usr/sbin/lofiadm\n For more information please visit the below reference link.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.855349\");\n script_version(\"$Revision: 9370 $\");\n script_cve_id(\"CVE-2003-1072\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 10:53:14 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-06-03 12:24:08 +0200 (Wed, 03 Jun 2009)\");\n script_tag(name:\"cvss_base\", value:\"2.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:N/A:P\");\n script_xref(name: \"SUNSolve\", value: \"114162-01\");\n script_name( \"Solaris Update for /kernel/drv/lofi drivers and /usr/sbin/lofiadm 114162-01\");\n\n script_xref(name : \"URL\" , value : \"http://sunsolve.sun.com/search/document.do?assetkey=1-21-114162-01-1\");\n\n script_tag(name:\"summary\", value:\"Check for the Version of /kernel/drv/lofi drivers and /usr/sbin/lofiadm\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"Solaris Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/solosversion\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"solaris.inc\");\n\nrelease = get_kb_item(\"ssh/login/solosversion\");\n\nif(release == NULL){\n exit(0);\n}\n\nif(solaris_check_patch(release:\"5.8\", arch:\"sparc\", patch:\"114162-01\", package:\"SUNWcarx.us SUNWcsr SUNWhea SUNWcarx.u SUNWcsu\") < 0)\n{\n security_message(0);\n exit(0);\n}\n", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}, {"lastseen": "2017-07-02T21:13:47", "bulletinFamily": "scanner", "cvelist": ["CVE-2003-1072"], "description": "Check for the Version of /kernel/drv/lofi drivers and /usr/sbin/lofiadm", "modified": "2017-02-20T00:00:00", "published": "2009-06-03T00:00:00", "id": "OPENVAS:855349", "href": "http://plugins.openvas.org/nasl.php?oid=855349", "type": "openvas", "title": "Solaris Update for /kernel/drv/lofi drivers and /usr/sbin/lofiadm 114162-01", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# Solaris Update for /kernel/drv/lofi drivers and /usr/sbin/lofiadm 114162-01\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2009 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ntag_affected = \"/kernel/drv/lofi drivers and /usr/sbin/lofiadm on solaris_5.8_sparc\";\ntag_insight = \"The remote host is missing a patch containing a security fix,\n which affects the following component(s): \n /kernel/drv/lofi drivers and /usr/sbin/lofiadm\n For more information please visit the below reference link.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\nif(description)\n{\n script_id(855349);\n script_version(\"$Revision: 5359 $\");\n script_cve_id(\"CVE-2003-1072\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-02-20 12:20:19 +0100 (Mon, 20 Feb 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-06-03 12:24:08 +0200 (Wed, 03 Jun 2009)\");\n script_tag(name:\"cvss_base\", value:\"2.1\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:L/AC:L/Au:N/C:N/I:N/A:P\");\n script_xref(name: \"SUNSolve\", value: \"114162-01\");\n script_name( \"Solaris Update for /kernel/drv/lofi drivers and /usr/sbin/lofiadm 114162-01\");\n\n script_xref(name : \"URL\" , value : \"http://sunsolve.sun.com/search/document.do?assetkey=1-21-114162-01-1\");\n\n script_summary(\"Check for the Version of /kernel/drv/lofi drivers and /usr/sbin/lofiadm\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (C) 2009 Greenbone Networks GmbH\");\n script_family(\"Solaris Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/solosversion\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"solaris.inc\");\n\nrelease = get_kb_item(\"ssh/login/solosversion\");\n\nif(release == NULL){\n exit(0);\n}\n\nif(solaris_check_patch(release:\"5.8\", arch:\"sparc\", patch:\"114162-01\", package:\"SUNWcarx.us SUNWcsr SUNWhea SUNWcarx.u SUNWcsu\") < 0)\n{\n security_message(0);\n exit(0);\n}\n", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}], "osvdb": [{"lastseen": "2017-04-28T13:20:11", "bulletinFamily": "software", "cvelist": ["CVE-2003-1072"], "edition": 1, "description": "# No description provided by the source\n\n## References:\n[Vendor Specific Advisory URL](http://sunsolve.sun.com/search/document.do?assetkey=1-26-54100-1)\n[Secunia Advisory ID:8686](https://secuniaresearch.flexerasoftware.com/advisories/8686/)\nISS X-Force ID: 11895\n[CVE-2003-1072](https://vulners.com/cve/CVE-2003-1072)\nBugtraq ID: 7454\n", "modified": "2003-04-27T23:46:32", "published": "2003-04-27T23:46:32", "href": "https://vulners.com/osvdb/OSVDB:15135", "id": "OSVDB:15135", "title": "Solaris lofiadm Memory Exhaustion Local DoS", "type": "osvdb", "cvss": {"score": 2.1, "vector": "AV:LOCAL/AC:LOW/Au:NONE/C:NONE/I:NONE/A:PARTIAL/"}}]}