Solaris 9 (x86) : 123896-81

medium Nessus Plugin ID 73912

Synopsis

The remote host is missing Sun Security Patch number 123896-81

Description

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control (subcomponent: Common Agent Container (Cacao)). Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network attacks via SSL/TLS. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data. Note: Applies only when Cacao is running on Solaris platform.

Vulnerability in the Solaris component of Oracle Enterprise Manager Grid Control (subcomponent: Common Agent Container (Cacao)). Supported versions that are affected are 2.3.1.0, 2.3.1.1, 2.3.1.2, 2.4.0.0, 2.4.1.0 and 2.4.2.0. Easily exploitable vulnerability allows successful authenticated network attacks via SSL/TLS. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data. Note: Applies only when Cacao is running on Solaris platform.

Solution

You should install this patch for your system to be up-to-date.

See Also

https://getupdates.oracle.com/readme/123896-81

Plugin Details

Severity: Medium

ID: 73912

File Name: solaris9_x86_123896.nasl

Version: 1.11

Type: local

Published: 5/8/2014

Updated: 1/14/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.5

CVSS v2

Risk Factor: Medium

Base Score: 4

Temporal Score: 3

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:sun:solaris

Required KB Items: Host/local_checks_enabled, Host/Solaris/showrev

Exploit Ease: No known exploits are available

Patch Publication Date: 2/13/2017

Reference Information

CVE: CVE-2013-4239, CVE-2014-4239

BID: 68631