NGS00042 Patch Notification: Solaris USB configuration descriptor kernel stack overflow

Solaris USB configuration descriptor kernel stack overflow CVE-2011-2295 25 July 2011 Andy Davis of NGS Secure has discovered a High risk vulnerability in Oracle Solaris. A local attacker can send a malformed USB configuration descriptor via a malicious USB device and trigger a kernel stack...

CVE-2011-2295

CVE-2011-2295 affects Oracle Solaris 8, 9, 10 and 11 Express. A local user can exploit a flaw in the USB driver by presenting a malformed USB configuration descriptor, triggering a kernel stack overflow in EHCI and potentially enabling arbitrary code execution (as described in the advisory/NGS di...

Solaris 9 (sparc) : 115553-31

SunOS 5.9: USB Drivers and Framework Patch. Date this patch was last updated by Sun : Nov/04/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...