Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect integrity and availability via vectors related to SMF/File Locking Services.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: SMF/File Locking Services). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via NFS. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle and Sun     Systems Products Suite (subcomponent: SMF/File Locking     Services). Supported versions that are affected are 8,     9, 10 and 11. Easily exploitable vulnerability allows     successful unauthenticated network attacks via NFS.
    Successful attack of this vulnerability can result in     unauthorized update, insert or delete access to some     Solaris accessible data and ability to cause a partial     denial of service (partial DOS) of Solaris.
    (CVE-2013-3757)

  - Vulnerability in the Solaris component of Oracle and Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 9, 10 and 11. Very     difficult to exploit vulnerability requiring logon to     Operating System plus additional login/authentication to     component or subcomponent. Successful attack of this     vulnerability can escalate attacker privileges resulting     in unauthorized Operating System takeover including     arbitrary code execution. (CVE-2013-3786)

SunOS 5.10: statd patch.
Date this patch was last updated by Sun : Aug/15/14

This plugin has been deprecated and either replaced with individual 148241 patch-revision plugins, or deemed non-security related.

SunOS 5.10_x86: statd patch.
Date this patch was last updated by Sun : Aug/15/14

This plugin has been deprecated and either replaced with individual 148242 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
108144	Solaris 10 (x86) : 148242-02	Nessus	Solaris Local Security Checks	medium
107651	Solaris 10 (sparc) : 148241-02	Nessus	Solaris Local Security Checks	medium
76827	Oracle Solaris Critical Patch Update : july2013_SRU5_5	Nessus	Solaris Local Security Checks	medium
66352	Solaris 10 (sparc) : 148241-05 (deprecated)	Nessus	Solaris Local Security Checks	medium
66332	Solaris 10 (x86) : 148242-05 (deprecated)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2013-3757

critical

Tenable Plugins

medium

medium

medium

medium

medium