| Vulnerability Name: | CVE-2006-4319 (CCN-28519) | ||||||||
| Assigned: | 2006-08-21 | ||||||||
| Published: | 2006-08-21 | ||||||||
| Updated: | 2018-10-30 | ||||||||
| Summary: | Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307. | ||||||||
| CVSS v3 Severity: | 8.2 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C) 5.3 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: MITRE Type: CNA CVE-2006-4319 Source: CCN Type: SA21581 Sun Solaris RBAC Profile Privilege Escalation Vulnerabilities Source: SECUNIA Type: Patch, Vendor Advisory 21581 Source: CCN Type: SA22295 Avaya CMS Sun Solaris RBAC Profile Privilege Escalation Source: SECUNIA Type: UNKNOWN 22295 Source: CCN Type: SECTRACK ID: 1016727 Solaris Buffer Overflow in `format` Command Lets Local Users Obtain Elevated Privileges Source: SECTRACK Type: UNKNOWN 1016727 Source: CCN Type: Sun Alert ID: 102519 Security Vulnerability Due to Buffer Overflow in The format(1M) Command May Allow Privilege Elevation For Certain RBAC Profiles Source: SUNALERT Type: Patch 102519 Source: CONFIRM Type: UNKNOWN http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm Source: CCN Type: ASA-2006-205 Sun Alert Notifications from Sun Weekly Report dated August 26 2006 Source: BID Type: UNKNOWN 19657 Source: CCN Type: BID-19657 Sun Solaris Format(1M) Buffer Overflow Vulnerability Source: VUPEN Type: UNKNOWN ADV-2006-3355 Source: XF Type: UNKNOWN solaris-format-rbac-bo(28519) Source: XF Type: UNKNOWN solaris-format-rbac-bo(28519) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:2164 | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| Oval Definitions | |||||||||
| |||||||||
| BACK | |||||||||