Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity via vectors related to Kernel.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data.

This Solaris system is missing necessary patches to address critical security updates :

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel/X86).
    Supported versions that are affected are 10 and 11.3.
    Easily exploitable vulnerability allows low privileged     attacker with logon to the infrastructure where Solaris     executes to compromise Solaris. Successful attacks of     this vulnerability can result in takeover of Solaris.
    (CVE-2016-5544)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: Kernel). Supported     versions that are affected are 10 and 11.3. Difficult to     exploit vulnerability allows high privileged attacker     with logon to the infrastructure where Solaris executes     to compromise Solaris. Successful attacks of this     vulnerability can result in unauthorized creation,     deletion or modification access to critical data or all     Solaris accessible data. (CVE-2016-5559)

  - Vulnerability in the Solaris component of Oracle Sun     Systems Products Suite (subcomponent: IKE). The     supported version that is affected is 11.3. Difficult to     exploit vulnerability allows unauthenticated attacker     with network access via IKEv2 to compromise Solaris.
    Successful attacks require human interaction from a     person other than the attacker. Successful attacks of     this vulnerability can result in unauthorized ability to     cause a partial denial of service (partial DOS) of     Solaris. (CVE-2016-5561)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data.

This plugin has been deprecated and either replaced with individual 152507 patch-revision plugins, or deemed non-security related.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Solaris accessible data.

This plugin has been deprecated and either replaced with individual 152506 patch-revision plugins, or deemed non-security related.

ID	Name	Product	Family	Severity
108257	Solaris 10 (x86) : 152507-01	Nessus	Solaris Local Security Checks	medium
107784	Solaris 10 (sparc) : 152506-01	Nessus	Solaris Local Security Checks	medium
94133	Oracle Solaris Critical Patch Update : oct2016_SRU11_3_11_6_0	Nessus	Solaris Local Security Checks	high
93588	Solaris 10 (x86) : 152507-01 (deprecated)	Nessus	Solaris Local Security Checks	medium
93587	Solaris 10 (sparc) : 152506-01 (deprecated)	Nessus	Solaris Local Security Checks	medium

Detections

Analytics

CVE-2016-5559

medium

Tenable Plugins

medium

medium

high

medium

medium