Vulnerabilities > CVE-2006-0769 - Local Privilege Escalation vulnerability in SUN Solaris 10.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
sun
nessus

Summary

Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors.

Vulnerable Configurations

Part Description Count
OS
Sun
1

Nessus

  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_120329.NASL
    descriptionSunOS 5.10: rexec patch. Date this patch was last updated by Sun : Feb/13/06
    last seen2018-09-01
    modified2018-08-13
    plugin id20943
    published2006-02-19
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=20943
    titleSolaris 10 (sparc) : 120329-02
    code
    #%NASL_MIN_LEVEL 80502
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a security fix.
    #
    # Disabled on 2013/04/30.
    #
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(20943);
     script_version("1.27");
    
     script_name(english: "Solaris 10 (sparc) : 120329-02");
    script_cve_id("CVE-2006-0769");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 120329-02");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.10: rexec patch.
    Date this patch was last updated by Sun : Feb/13/06');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "http://download.oracle.com/sunalerts/1000978.1.html");
     script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
     script_set_attribute(attribute: "patch_publication_date", value: "2006/02/13");
     script_set_attribute(attribute: "cpe", value: "cpe:/o:sun:solaris");
     script_set_attribute(attribute: "plugin_type", value: "local");
      script_set_attribute(attribute:"plugin_publication_date", value:"2006/02/19");
      script_cvs_date("Date: 2019/10/25 13:36:23");
      script_set_attribute(attribute:"vuln_publication_date", value:"2006/02/14");
     script_end_attributes();
    
     script_summary(english: "Check for patch 120329-02");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    # Deprecated.
    exit(0, "The associated patch is not currently a security fix.");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_120330.NASL
    descriptionSunOS 5.10_x86: rexec patch. Date this patch was last updated by Sun : Feb/13/06
    last seen2018-09-01
    modified2018-08-13
    plugin id20944
    published2006-02-19
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=20944
    titleSolaris 10 (x86) : 120330-02
    code
    #%NASL_MIN_LEVEL 80502
    
    # @DEPRECATED@
    #
    # This script has been deprecated as the associated patch is not
    # currently a security fix.
    #
    # Disabled on 2013/02/18.
    #
    
    #
    # (C) Tenable Network Security, Inc.
    #
    #
    
    if ( ! defined_func("bn_random") ) exit(0);
    include("compat.inc");
    
    if(description)
    {
     script_id(20944);
     script_version("1.25");
    
     script_name(english: "Solaris 10 (x86) : 120330-02");
    script_cve_id("CVE-2006-0769");
     script_set_attribute(attribute: "synopsis", value:
    "The remote host is missing Sun Security Patch number 120330-02");
     script_set_attribute(attribute: "description", value:
    'SunOS 5.10_x86: rexec patch.
    Date this patch was last updated by Sun : Feb/13/06');
     script_set_attribute(attribute: "solution", value:
    "You should install this patch for your system to be up-to-date.");
     script_set_attribute(attribute: "see_also", value:
    "http://download.oracle.com/sunalerts/1000978.1.html");
     script_set_attribute(attribute: "cvss_vector", value: "CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
     script_set_attribute(attribute: "patch_publication_date", value: "2006/02/13");
     script_set_attribute(attribute: "cpe", value: "cpe:/o:sun:solaris");
     script_set_attribute(attribute: "plugin_type", value: "local");
      script_set_attribute(attribute:"plugin_publication_date", value:"2006/02/19");
      script_cvs_date("Date: 2019/10/25 13:36:23");
      script_set_attribute(attribute:"vuln_publication_date", value:"2006/02/14");
     script_end_attributes();
    
     script_summary(english: "Check for patch 120330-02");
     script_category(ACT_GATHER_INFO);
     script_copyright(english:"This script is Copyright (C) 2006-2019 Tenable Network Security, Inc.");
     family["english"] = "Solaris Local Security Checks";
     script_family(english:family["english"]);
     
     script_dependencies("ssh_get_info.nasl");
     script_require_keys("Host/Solaris/showrev");
     exit(0);
    }
    
    # Deprecated.
    exit(0, "The associated patch is not currently a security fix.");
    

Oval

accepted2006-04-06T06:30:00.000-04:00
classvulnerability
contributors
nameRobert L. Hollis
organizationThreatGuard, Inc.
descriptionUnspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors.
familyunix
idoval:org.mitre.oval:def:1580
statusaccepted
submitted2006-02-19T05:38:00.000-04:00
titleKerberos Command Execution Vulnerability rexec Daemon
version36