Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality and integrity via vectors related to NFS client mounts and IPv6.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6.

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle and Sun     Systems Products Suite (subcomponent: Filesystem/NFS).
    Supported versions that are affected are 8, 9, 10 and     11. Easily exploitable vulnerability allows successful     unauthenticated network attacks via IPv6. Successful     attack of this vulnerability can result in unauthorized     update, insert or delete access to some Solaris     accessible data as well as read access to a subset of     Solaris accessible data. Note: CVE-2013-0405 occurs only     when the Solaris NFS client mounts the NFS server over     IPv6. (CVE-2013-0405)

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6.

This plugin has been deprecated and either replaced with individual 148383 patch-revision plugins, or deemed non-security related.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6.

This plugin has been deprecated and either replaced with individual 148384 patch-revision plugins, or deemed non-security related.

SunOS 5.9_x86: librpcsvc patch.
Date this patch was last updated by Sun : Oct/10/07

SunOS 5.9: librpcsvc patch.
Date this patch was last updated by Sun : Oct/10/07

SunOS 5.8_x86: librpcsvc patch.
Date this patch was last updated by Sun : Oct/10/07

SunOS 5.8: librpcsvc patch.
Date this patch was last updated by Sun : Oct/10/07

ID	Name	Product	Family	Severity
108146	Solaris 10 (x86) : 148384-01	Nessus	Solaris Local Security Checks	medium
107653	Solaris 10 (sparc) : 148383-01	Nessus	Solaris Local Security Checks	medium
76803	Oracle Solaris Critical Patch Update : apr2013_SRU3	Nessus	Solaris Local Security Checks	medium
64606	Solaris 10 (sparc) : 148383-01 (deprecated)	Nessus	Solaris Local Security Checks	medium
64524	Solaris 10 (x86) : 148384-01 (deprecated)	Nessus	Solaris Local Security Checks	medium
27098	Solaris 9 (x86) : 123397-01	Nessus	Solaris Local Security Checks	high
27091	Solaris 9 (sparc) : 123396-01	Nessus	Solaris Local Security Checks	high
27089	Solaris 8 (x86) : 127549-01	Nessus	Solaris Local Security Checks	high
27087	Solaris 8 (sparc) : 127548-01	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2013-0405

medium

Tenable Plugins

medium

medium

medium

medium

medium

high

high

high

high