Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Password Policy.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Password Policy). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: Kernel/sockfs ). Supported     versions that are affected are 8, 9, 10 and 11. Easily     exploitable vulnerability requiring logon to Operating     System. Successful attack of this vulnerability can     result in unauthorized Operating System hang or     frequently repeatable crash (complete DOS).
    (CVE-2012-1681)

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: Password Policy).
    Supported versions that are affected are 8, 9, 10 and     11. Easily exploitable vulnerability requiring logon to     Operating System plus additional login/authentication to     component or subcomponent. Successful attack of this     vulnerability can escalate attacker privileges resulting     in unauthorized update, insert or delete access to some     Solaris accessible data as well as read access to a     subset of Solaris accessible data and ability to cause a     partial denial of service (partial DOS) of Solaris.
    (CVE-2012-1684)

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Password Policy). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

This plugin has been deprecated and either replaced with individual 148166 patch-revision plugins, or deemed non-security related.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Password Policy). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

This plugin has been deprecated and either replaced with individual 148165 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
108143	Solaris 10 (x86) : 148166-02	Nessus	Solaris Local Security Checks	medium
107650	Solaris 10 (sparc) : 148165-02	Nessus	Solaris Local Security Checks	medium
76800	Oracle Solaris Critical Patch Update : apr2012_SRU3	Nessus	Solaris Local Security Checks	medium
57681	Solaris 10 (x86) : 148166-02 (deprecated)	Nessus	Solaris Local Security Checks	medium
57680	Solaris 10 (sparc) : 148165-02 (deprecated)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2012-1684

high

Tenable Plugins

medium

medium

medium

medium

medium