CVE-2010-4435
28Vexday Risk Score
Sem sinal de exploração. Ela tem prova de conceito pública.
ssvc Attendepss 14%
da publicação à arma21 dias
Publicada no NVD19 de jan.
1ª PoC+21d
probabilidade de exploração
14%top 4% das CVEs
exploração observada
nãonenhuma fonte reporta
2 exploit(s) público(s)
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 2
exploitdbwww.exploit-db.com/exploits/16137não verificadocve_referencewww.exploit-db.com/exploits/16137não verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
Referências
http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.aschttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395http://osvdb.org/70569http://secunia.com/advisories/42984http://secunia.com/advisories/43258http://securityreason.com/securityalert/8069https://exchange.xforce.ibmcloud.com/vulnerabilities/64797https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12794http://www.exploit-db.com/exploits/16137http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlhttp://www.securityfocus.com/archive/1/516284/100/0/threadedhttp://www.securityfocus.com/archive/1/516304/100/0/threaded