CVE-2006-4307
6.2 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
26.9%
Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and CVE-2006-4319.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sun:sunos | sun sunos | eq | 5.8 |
| sun:solaris | sun solaris | eq | 9.0 |
| sun:solaris | sun solaris | eq | 8.0 |
References
secunia.com/advisories/21581
secunia.com/advisories/22295
securitytracker.com/id?1016726
sunsolve.sun.com/search/document.do?assetkey=1-26-102514-1
support.avaya.com/elmodocs2/security/ASA-2006-205.htm
www.securityfocus.com/bid/19647
www.vupen.com/english/advisories/2006/3355
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1573
Related
6.2 Medium
AI Score
Confidence
Low
7.2 High
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.001 Low
EPSS
Percentile
26.9%