Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gzip.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gzip). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

This Solaris system is missing necessary patches to address a critical security update :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Gzip). Supported     versions that are affected are 10 and 11.2. Difficult to     exploit vulnerability requiring logon to Operating     System. Successful attack of this vulnerability can     result in unauthorized update, insert or delete access     to some Solaris accessible data as well as read access     to a subset of Solaris accessible data and ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2015-2642)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gzip). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

This plugin has been deprecated and either replaced with individual 120720 patch-revision plugins, or deemed non-security related.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Gzip). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

This plugin has been deprecated and either replaced with individual 120719 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
107869	Solaris 10 (x86) : 120720-07	Nessus	Solaris Local Security Checks	medium
107367	Solaris 10 (sparc) : 120719-07	Nessus	Solaris Local Security Checks	medium
86530	Oracle Solaris Critical Patch Update : oct2015_SRU11_1_15_4_0	Nessus	Solaris Local Security Checks	medium
19840	Solaris 10 (x86) : 120720-07 (deprecated)	Nessus	Solaris Local Security Checks	medium
19839	Solaris 10 (sparc) : 120719-07 (deprecated)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2015-2642

high

Tenable Plugins

medium

medium

medium

medium

medium