Vulnerabilities > CVE-2006-4307 - Local Privilege Escalation vulnerability in Sun Solaris Format(1M)

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
sun
NVD
Published: 2006-08-23
Updated: 2018-10-30

Summary

Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and CVE-2006-4319.

Vulnerable Configurations

Part Description Count
OS
Sun
4

Oval

accepted2007-09-27T08:57:40.578-04:00
classvulnerability
contributors
namePai Peng
organizationOpsware, Inc.
definition_extensions
  • commentSolaris 8 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1539
  • commentSolaris 9 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1457
  • commentSolaris 8 (x86) is installed
    ovaloval:org.mitre.oval:def:2059
  • commentSolaris 9 (x86) is installed
    ovaloval:org.mitre.oval:def:1683
descriptionUnspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that permit running format with elevated privileges, a different issue than CVE-2006-4306 and CVE-2006-4319.
familyunix
idoval:org.mitre.oval:def:1573
statusaccepted
submitted2007-08-10T12:25:25.000-04:00
titleSecurity Vulnerability May Allow Users With the "File System Management" RBAC Profile to Gain Elevated Privileges
version35

References