Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: PAM LDAP module). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Automated     Installer). The supported version that is affected is     11.3. Easily exploitable vulnerability allows     unauthenticated attacker with network access via     multiple protocols to compromise Solaris. Successful     attacks require human interaction from a person other     than the attacker and while the vulnerability is in     Solaris, attacks may significantly impact additional     products. Successful attacks of this vulnerability can     result in unauthorized update, insert or delete access     to some of Solaris accessible data. (CVE-2016-0623)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: PAM LDAP module).
    Supported versions that are affected are 10 and 11.3.
    Easily exploitable vulnerability allows unauthenticated     attacker with network access via multiple protocols to     compromise Solaris. Successful attacks of this     vulnerability can result in takeover of Solaris.
    (CVE-2016-0693)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Filesystem).
    Supported versions that are affected are 10 and 11.3.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2016-3419)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Filesystem).
    Supported versions that are affected are 10 and 11.3.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in takeover of Solaris.
    (CVE-2016-3441)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: PAM LDAP module). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

This plugin has been deprecated and either replaced with individual 150546 patch-revision plugins, or deemed non-security related.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: PAM LDAP module). Supported versions that are affected are 10 and 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris.

This plugin has been deprecated and either replaced with individual 150545 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
108204	Solaris 10 (x86) : 150546-02	Nessus	Solaris Local Security Checks	critical
107723	Solaris 10 (sparc) : 150545-02	Nessus	Solaris Local Security Checks	critical
90620	Oracle Solaris Critical Patch Update : apr2016_SRU11_3_5_6_0	Nessus	Solaris Local Security Checks	critical
90086	Solaris 10 (x86) : 150546-02 (deprecated)	Nessus	Solaris Local Security Checks	critical
90082	Solaris 10 (sparc) : 150545-02 (deprecated)	Nessus	Solaris Local Security Checks	critical

Detections

Analytics

CVE-2016-0693

critical

Tenable Plugins

critical

critical

critical

critical

critical