CVE-2010-4435
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 14%
from disclosure to weapon21 days
Published on NVDJan 19
1st PoC+21d
exploitation probability
14%top 4% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.
Affected products
n/a · n/apublic PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16137unverifiedcve_referencewww.exploit-db.com/exploits/16137unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.aschttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395http://osvdb.org/70569http://secunia.com/advisories/42984http://secunia.com/advisories/43258http://securityreason.com/securityalert/8069https://exchange.xforce.ibmcloud.com/vulnerabilities/64797https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12794http://www.exploit-db.com/exploits/16137http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.securityfocus.com/archive/1/516284/100/0/threadedhttp://www.securityfocus.com/archive/1/516304/100/0/threaded