Lucene search

K
cve[email protected]CVE-2006-4319
HistoryAug 24, 2006 - 1:04 a.m.

CVE-2006-4319

2006-08-2401:04:00
NVD-CWE-Other
web.nvd.nist.gov
20
cve-2006-4319
buffer overflow
solaris
format command
arbitrary code
vulnerability

7.3 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.4%

Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the “File System Management” RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.

7.3 High

AI Score

Confidence

Low

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.001 Low

EPSS

Percentile

26.4%

Related for CVE-2006-4319