CVE-2010-4435
28Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 14%
de la publicación al arma21 días
Publicada en NVD19 ene
1ª PoC+21d
probabilidad de explotación
14%top 4% de las CVE
explotación observada
noninguna fuente lo reporta
2 exploit(s) público(s)
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.
Productos afectados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/16137no verificadocve_referencewww.exploit-db.com/exploits/16137no verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.aschttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395http://osvdb.org/70569http://secunia.com/advisories/42984http://secunia.com/advisories/43258http://securityreason.com/securityalert/8069https://exchange.xforce.ibmcloud.com/vulnerabilities/64797https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12794http://www.exploit-db.com/exploits/16137http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.securityfocus.com/archive/1/516284/100/0/threadedhttp://www.securityfocus.com/archive/1/516304/100/0/threaded