CVE-2017-3585

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: User Interface subsystem. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2017-3580

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: RAS subsystems. The supported version that is affected is AK 2013. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3582

Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite subcomponent: Backup/Restore Utility. Supported versions that are affected are 2.3.8 and 2.3.13. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the...

CVE-2017-3580

The CVE-2017-3580 entry concerns the Oracle Sun ZFS Storage Appliance Kit (AK) component of the Sun ZFS Storage Appliance/Sun Systems Products Suite (subcomponent: RAS subsystems). Affected is AK 2013; the vulnerability is a remote elevation of privilege that can be exploited by an unauthenticate...

CVE-2017-3474

CVE-2017-3474 affects the Solaris component Zone in Oracle Solaris 11.3. The vulnerability enables a low-privilege, local attacker with logon to the Solaris host to compromise confidentiality by unauthorized read access to a subset of Solaris data. The CVSS v3.0 metrics indicate a low impact (C:L...

CVE-2017-3498

Summary: CVE-2017-3498 affects Oracle Solaris 11.3 in the Kernel subcomponent. It is a local, low-privilege vulnerability that could allow an attacker with logon to access a subset of Solaris data (no code execution described). The CVSSv3 base score is 3.3 (Low) with confidentiality impact. Affec...

CVE-2017-3497

Affected product: Oracle Solaris 11.3 (Solaris component of Oracle Sun Systems Products Suite), subcomponent Remote Administration Daemon. Root cause and impact per CNVD/NVD: unauthenticated attacker over network can read, update, insert, or delete Solaris data, and cause partial DOS; CVSSv3 base...

CVE-2017-3623

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

CVE-2016-5551

Vulnerability in the Solaris Cluster component of Oracle Sun Systems Products Suite subcomponent: NAS device addition. The supported version that is affected is 4.3. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the infrastructure where Solaris Cluster executes ...

CVE-2017-3621

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3578

CVE-2017-3578 describes a vulnerability in the Sun ZFS Storage Appliance Kit (AK) within Oracle Sun Systems Products Suite (subcomponent: RAS subsystems). Affected: AK 2013. The issue is exploitable by a low-privileged attacker who can log on to the infrastructure where AK runs, potentially leadi...

CVE-2017-3516

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3516

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel Zones virtualized NIC driver. The supported version that is affected is 11.3. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise...

CVE-2017-3564

CVE-2017-3564 affects Oracle Solaris 11.3 RBAC in the Solaris kernel/RBAC implementation. A local, low-privilege attacker with logon and required user interaction can compromise Solaris, potentially leading to takeover of the system and high-impact outcomes (C/H/I/A = 8.2/3.0). The vulnerability ...

CVE-2017-3621

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3623

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

CVE-2017-3584

CVE-2017-3584 describes a vulnerability in Oracle Sun ZFS Storage Appliance Kit (AK), subcomponent RAS subsystems, affecting AK version 2013. The issue allows a low-privileged user with local access to compromise the Sun ZFS Storage Appliance Kit (AK), with potential takeover and impact to relate...

CVE-2017-3585

The CVE-2017-3585 entry concerns the Sun ZFS Storage Appliance Kit (AK) within Oracle Sun Systems Products Suite. Affected is AK 2013 in the UI subcomponent. The vulnerability enables an unauthenticated, network-accessible attacker (via HTTP) to perform unauthorized updates, inserts, or deletes o...

CVE-2017-3623

CVE-2017-3623 is referenced in connected materials as EBBSHAVE/EBBISLAND RPC buffer overflow affecting IBM AIX on PPC. Public exploit entries (Exploit-DB) cite remote code execution via RPC, targeting IBM AIX PPC versions 6100-09-04-1441, 7100-03-05-1524, 7100-04-00-0000, 7200-01-01-1642. No offi...

CVE-2016-5551

CVE-2016-5551 affects the Solaris Cluster NAS Device Addition component in Oracle Sun Systems Products Suite, version 4.3. The vulnerability description indicates an easily exploitable, unauthenticated access scenario that requires user interaction, potentially enabling read access to a subset of...