Vulnerability Name:

CVE-2006-0191 (CCN-24085)

Assigned:2006-01-11
Published:2006-01-11
Updated:2017-10-11
Summary:Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors involving the use of the find command on the "/proc" filesystem.
Note: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2005-3250.
CVSS v3 Severity:4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Low
CVSS v2 Severity:4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
2.1 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
Vulnerability Type:CWE-Other
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2006-0191

Source: CCN
Type: SA18420
Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability

Source: SECUNIA
Type: Patch, Vendor Advisory
18420

Source: CCN
Type: SA19087
Avaya CMS / IR Multiple Vulnerabilities

Source: SECUNIA
Type: UNKNOWN
19087

Source: CCN
Type: SECTRACK ID: 1015479
Solaris find Command Lets Local Users Deny Service

Source: SECTRACK
Type: UNKNOWN
1015479

Source: CCN
Type: Sun Alert ID: 102108
Security Vulnerability Using find(1) to Search "/proc" May Cause a Denial of Service (DoS) Condition

Source: SUNALERT
Type: Patch, Vendor Advisory
102108

Source: CONFIRM
Type: UNKNOWN
http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm

Source: OSVDB
Type: UNKNOWN
22347

Source: CCN
Type: OSVDB ID: 22347
Solaris find() Command /proc Filesystem Search Local DoS

Source: BID
Type: UNKNOWN
16222

Source: CCN
Type: BID-16222
Sun Solaris Find In Proc Filesystem Local Denial Of Service Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2006-0166

Source: XF
Type: UNKNOWN
solaris-find-proc-dos(24085)

Source: XF
Type: UNKNOWN
solaris-find-proc-dos(24085)

Source: OVAL
Type: UNKNOWN
oval:org.mitre.oval:def:1608

Vulnerable Configuration:Configuration 1:
  • cpe:/o:sun:solaris:10.0:*:sparc:*:*:*:*:*

  • Configuration CCN 1:
  • cpe:/o:sun:solaris:10::sparc:*:*:*:*:*
  • OR cpe:/o:sun:solaris:10::x86:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.mitre.oval:def:1608
    V
    Solaris 10 find on /proc panic DoS Vulnerability
    2011-05-09
    BACK
    sun solaris 10.0
    sun solaris 10
    sun solaris 10