Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gnome Trusted Extension.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Gnome Trusted Extension). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: Kernel). The supported     version that is affected is 11. Easily exploitable     vulnerability allows successful unauthenticated network     attacks via TCP/IP. Successful attack of this     vulnerability can result in unauthorized Operating     System hang or frequently repeatable crash (complete     DOS). (CVE-2012-3210)

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: COMSTAR). The supported     version that is affected is 11. Easily exploitable     vulnerability allows successful unauthenticated network     attacks via TCP/IP(iSCSI). Successful attack of this     vulnerability can result in unauthorized Operating     System hang or frequently repeatable crash (complete     DOS). (CVE-2012-3189)

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: Gnome Trusted Extension).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized Operating     System takeover including arbitrary code execution.
    (CVE-2012-3199)

  - Vulnerability in the Solaris component of Oracle Sun     Products Suite (subcomponent: Kernel/System Call).
    Supported versions that are affected are 10 and 11.
    Easily exploitable vulnerability requiring logon to     Operating System plus additional login/authentication to     component or subcomponent. Successful attack of this     vulnerability can escalate attacker privileges resulting     in unauthorized Operating System hang or frequently     repeatable crash (complete DOS). (CVE-2012-3211)

ID	Name	Product	Family	Severity
107933	Solaris 10 (x86) : 125534-17	Nessus	Solaris Local Security Checks	high
107432	Solaris 10 (sparc) : 125533-17	Nessus	Solaris Local Security Checks	high
76830	Oracle Solaris Critical Patch Update : oct2012_SRU11_4	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2012-3199

high

Tenable Plugins

high

high

high