Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rmformat.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: rmformat Utility). Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: NFSv4). Supported     versions that are affected are 10 and 11.2. Difficult to     exploit vulnerability requiring logon to Operating     System. Successful attack of this vulnerability can     result in unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Solaris.
    (CVE-2015-2580)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: CPU performance     counters drivers). The supported version that is     affected is 11.2. Easily exploitable vulnerability     requiring logon to Operating System. Successful attack     of this vulnerability can result in unauthorized     Operating System hang or frequently repeatable crash     (complete DOS). (CVE-2015-2609)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: NVM Express SSD     driver). The supported version that is affected is 11.2.
    Easily exploitable vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized Operating     System hang or frequently repeatable crash (complete     DOS). (CVE-2015-2614)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: rmformat Utility).
    Supported versions that are affected are 10 and 11.2.
    Easily exploitable vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized Operating     System takeover including arbitrary code execution.
    (CVE-2015-2631)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: DHCP Server).
    Supported versions that are affected are 10 and 11.2.
    Difficult to exploit vulnerability requiring logon to     Operating System. Successful attack of this     vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2015-2662)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: rmformat Utility). Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.

This plugin has been deprecated and either replaced with individual 148628 patch-revision plugins, or deemed non-security related.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: rmformat Utility). Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.

This plugin has been deprecated and either replaced with individual 148627 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
108156	Solaris 10 (x86) : 148628-02	Nessus	Solaris Local Security Checks	high
107663	Solaris 10 (sparc) : 148627-02	Nessus	Solaris Local Security Checks	high
84759	Oracle Solaris Critical Patch Update : jul2015_SRU11_2_10_5_0	Nessus	Solaris Local Security Checks	high
83542	Solaris 10 (x86) : 148628-02 (deprecated)	Nessus	Solaris Local Security Checks	high
83540	Solaris 10 (sparc) : 148627-02 (deprecated)	Nessus	Solaris Local Security Checks	high

Detections

Analytics

CVE-2015-2631

high

Tenable Plugins

high

high

high

high

high