Unspecified vulnerability in Oracle Solaris 10 and 11.1 allows local users to affect availability via vectors related to Name Service Cache Daemon (NSCD).

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Name Service Cache Daemon (NSCD)).
Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System.
Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle and Sun     Systems Products Suite (subcomponent: Name Service Cache     Daemon (NSCD)). Supported versions that are affected are     10 and 11.1. Easily exploitable vulnerability requiring     logon to Operating System. Successful attack of this     vulnerability can result in unauthorized ability to     cause a hang or frequently repeatable crash (complete     DOS) of Solaris. (CVE-2013-5872)

  - Vulnerability in the Solaris component of Oracle and Sun     Systems Products Suite (subcomponent: Role Based Access     Control (RBAC)). The supported version that is affected     is 11.1. Difficult to exploit vulnerability requiring     logon to Operating System plus additional, multiple     logins to components. Successful attack of this     vulnerability can escalate attacker privileges resulting     in unauthorized update, insert or delete access to some     Solaris accessible data and ability to cause a partial     denial of service (partial DOS) of Solaris.
    (CVE-2013-5875)

  - Vulnerability in the Solaris component of Oracle and Sun     Systems Products Suite (subcomponent: Audit). The     supported version that is affected is 11.1. Easily     exploitable vulnerability requiring logon to Operating     System plus additional login/authentication to component     or subcomponent. Successful attack of this vulnerability     can escalate attacker privileges resulting in     unauthorized update, insert or delete access to some     Solaris accessible data. (CVE-2013-5885)

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Name Service Cache Daemon (NSCD)).
Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System.
Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

This plugin has been deprecated and either replaced with individual 149647 patch-revision plugins, or deemed non-security related.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Name Service Cache Daemon (NSCD)).
Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System.
Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

This plugin has been deprecated and either replaced with individual 149646 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
108181	Solaris 10 (x86) : 149647-02	Nessus	Solaris Local Security Checks	low
107687	Solaris 10 (sparc) : 149646-02	Nessus	Solaris Local Security Checks	low
76812	Oracle Solaris Critical Patch Update : jan2014_SRU11_1_13_6_0	Nessus	Solaris Local Security Checks	low
71456	Solaris 10 (x86) : 149647-02 (deprecated)	Nessus	Solaris Local Security Checks	low
71455	Solaris 10 (sparc) : 149646-02 (deprecated)	Nessus	Solaris Local Security Checks	low

Detections

Analytics

CVE-2013-5872

medium

Tenable Plugins

low

low

low

low

low