Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to gssd.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: gssd(1M)). Supported     versions that are affected are 8, 9, 10 and 11. Very     difficult to exploit vulnerability requiring logon to     Operating System plus additional, multiple logins to     components. Successful attack of this vulnerability can     escalate attacker privileges resulting in unauthorized     Operating System takeover including arbitrary code     execution. (CVE-2012-1683)

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: Kernel/Privileges). The     supported version that is affected is 11. Difficult to     exploit vulnerability requiring logon to Operating     System plus additional login/authentication to component     or subcomponent. Successful attack of this vulnerability     can escalate attacker privileges resulting in     unauthorized Operating System takeover including     arbitrary code execution. (CVE-2012-1691)

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: Kernel/GLD(7D)). The     supported version that is affected is 11. Very difficult     to exploit vulnerability allows successful authenticated     network attacks via TCP/IP. Successful attack of this     vulnerability can result in unauthorized read access to     a subset of Solaris accessible data. (CVE-2012-1698)

SunOS 5.10_x86: Solaris kernel patch.
Date this patch was last updated by Sun : Nov/30/12

SunOS 5.10: Solaris kernel patch.
Date this patch was last updated by Sun : Apr/17/12

SunOS 5.9_x86: krb5, gss patch.
Date this patch was last updated by Sun : Sep/14/10

SunOS 5.9: krb5, gss patch.
Date this patch was last updated by Sun : Sep/14/10

ID	Name	Product	Family	Severity
76801	Oracle Solaris Critical Patch Update : apr2012_SRU4	Nessus	Solaris Local Security Checks	medium
56441	Solaris 10 (x86) : 147441-27	Nessus	Solaris Local Security Checks	medium
56435	Solaris 10 (sparc) : 147440-15	Nessus	Solaris Local Security Checks	medium
13620	Solaris 9 (x86) : 115168-24	Nessus	Solaris Local Security Checks	critical
13520	Solaris 9 (sparc) : 112908-38	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2012-1683

high

Tenable Plugins

medium

medium

medium

critical

critical