Vulnerability Name: | CVE-2006-0191 (CCN-24085) | ||||||||
Assigned: | 2006-01-11 | ||||||||
Published: | 2006-01-11 | ||||||||
Updated: | 2017-10-11 | ||||||||
Summary: | Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors involving the use of the find command on the "/proc" filesystem. Note: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2005-3250. | ||||||||
CVSS v3 Severity: | 4.0 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L)
| ||||||||
CVSS v2 Severity: | 4.9 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C) 3.7 Low (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C/E:U/RL:OF/RC:C)
1.6 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P/E:U/RL:OF/RC:C)
| ||||||||
Vulnerability Type: | CWE-Other | ||||||||
Vulnerability Consequences: | Denial of Service | ||||||||
References: | Source: MITRE Type: CNA CVE-2006-0191 Source: CCN Type: SA18420 Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability Source: SECUNIA Type: Patch, Vendor Advisory 18420 Source: CCN Type: SA19087 Avaya CMS / IR Multiple Vulnerabilities Source: SECUNIA Type: UNKNOWN 19087 Source: CCN Type: SECTRACK ID: 1015479 Solaris find Command Lets Local Users Deny Service Source: SECTRACK Type: UNKNOWN 1015479 Source: CCN Type: Sun Alert ID: 102108 Security Vulnerability Using find(1) to Search "/proc" May Cause a Denial of Service (DoS) Condition Source: SUNALERT Type: Patch, Vendor Advisory 102108 Source: CONFIRM Type: UNKNOWN http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm Source: OSVDB Type: UNKNOWN 22347 Source: CCN Type: OSVDB ID: 22347 Solaris find() Command /proc Filesystem Search Local DoS Source: BID Type: UNKNOWN 16222 Source: CCN Type: BID-16222 Sun Solaris Find In Proc Filesystem Local Denial Of Service Vulnerability Source: VUPEN Type: UNKNOWN ADV-2006-0166 Source: XF Type: UNKNOWN solaris-find-proc-dos(24085) Source: XF Type: UNKNOWN solaris-find-proc-dos(24085) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:1608 | ||||||||
Vulnerable Configuration: | Configuration 1: Configuration CCN 1: Denotes that component is vulnerable | ||||||||
Oval Definitions | |||||||||
| |||||||||
BACK |