Vulnerability Details : CVE-2006-4319
Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2006-4319
Probability of exploitation activity in the next 30 days: 0.04%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 11 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2006-4319
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Source |
|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
[email protected] |
References for CVE-2006-4319
- http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
-
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1
Patch
- http://www.vupen.com/english/advisories/2006/3355
-
http://securitytracker.com/id?1016727
-
http://www.securityfocus.com/bid/19657
-
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/28519
Products affected by CVE-2006-4319
- cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*
- cpe:2.3:o:sun:solaris:8.0:beta:*:*:*:*:*:*
- cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:8.0:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:solaris:9.0:x86_update_2:*:*:*:*:*:*
- cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10.0:*:64_bit:*:*:*:*:*
- cpe:2.3:o:sun:solaris:10.0:hw2:*:*:*:*:*:*