Vulnerabilities > CVE-2013-0405 - Remote Security vulnerability in Oracle Sun Products Suite

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
sun
nessus

Summary

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality and integrity via vectors related to NFS client mounts and IPv6.

Vulnerable Configurations

Part Description Count
OS
Sun
4

Nessus

  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_X86_123397.NASL
    descriptionSunOS 5.9_x86: librpcsvc patch. Date this patch was last updated by Sun : Oct/10/07
    last seen2020-06-01
    modified2020-06-02
    plugin id27098
    published2007-10-17
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/27098
    titleSolaris 9 (x86) : 123397-01
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text in this plugin was
    # extracted from the Oracle SunOS Patch Updates.
    #
    include("compat.inc");
    
    if (description)
    {
      script_id(27098);
      script_version("1.21");
      script_cvs_date("Date: 2019/10/25 13:36:24");
    
      script_cve_id("CVE-2007-5462", "CVE-2013-0405");
    
      script_name(english:"Solaris 9 (x86) : 123397-01");
      script_summary(english:"Check for patch 123397-01");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote host is missing Sun Security Patch number 123397-01"
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "SunOS 5.9_x86: librpcsvc patch.
    Date this patch was last updated by Sun : Oct/10/07"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"http://download.oracle.com/sunalerts/1000452.1.html"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"You should install this patch for your system to be up-to-date."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C");
      script_cwe_id(20);
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:sun:solaris");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2007/10/10");
      script_set_attribute(attribute:"plugin_publication_date", value:"2007/10/17");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2007-2019 Tenable Network Security, Inc.");
      script_family(english:"Solaris Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/Solaris/showrev");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("solaris.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    
    if (solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"123397-01", obsoleted_by:"", package:"SUNWarc", version:"11.9.0,REV=2002.11.04.02.51") < 0) flag++;
    if (solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"123397-01", obsoleted_by:"", package:"SUNWhea", version:"11.9.0,REV=2002.11.04.02.51") < 0) flag++;
    if (solaris_check_patch(release:"5.9_x86", arch:"i386", patch:"123397-01", obsoleted_by:"", package:"SUNWcsl", version:"11.9.0,REV=2002.11.04.02.51") < 0) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:solaris_get_report());
      else security_hole(0);
      exit(0);
    }
    audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_148383-01.NASL
    descriptionVulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6.
    last seen2020-06-01
    modified2020-06-02
    plugin id107653
    published2018-03-12
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/107653
    titleSolaris 10 (sparc) : 148383-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_148383.NASL
    descriptionVulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6. This plugin has been deprecated and either replaced with individual 148383 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id64606
    published2013-02-13
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=64606
    titleSolaris 10 (sparc) : 148383-01 (deprecated)
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS9_123396.NASL
    descriptionSunOS 5.9: librpcsvc patch. Date this patch was last updated by Sun : Oct/10/07
    last seen2020-06-01
    modified2020-06-02
    plugin id27091
    published2007-10-17
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/27091
    titleSolaris 9 (sparc) : 123396-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_148384.NASL
    descriptionVulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6. This plugin has been deprecated and either replaced with individual 148384 patch-revision plugins, or deemed non-security related.
    last seen2019-02-21
    modified2018-07-30
    plugin id64524
    published2013-02-10
    reporterTenable
    sourcehttps://www.tenable.com/plugins/index.php?view=single&id=64524
    titleSolaris 10 (x86) : 148384-01 (deprecated)
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_127548.NASL
    descriptionSunOS 5.8: librpcsvc patch. Date this patch was last updated by Sun : Oct/10/07
    last seen2020-06-01
    modified2020-06-02
    plugin id27087
    published2007-10-17
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/27087
    titleSolaris 8 (sparc) : 127548-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS8_X86_127549.NASL
    descriptionSunOS 5.8_x86: librpcsvc patch. Date this patch was last updated by Sun : Oct/10/07
    last seen2020-06-01
    modified2020-06-02
    plugin id27089
    published2007-10-17
    reporterThis script is Copyright (C) 2007-2019 Tenable Network Security, Inc.
    sourcehttps://www.tenable.com/plugins/nessus/27089
    titleSolaris 8 (x86) : 127549-01
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS_APR2013_SRU3.NASL
    descriptionThis Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6. (CVE-2013-0405)
    last seen2020-06-01
    modified2020-06-02
    plugin id76803
    published2014-07-26
    reporterThis script is Copyright (C) 2014-2018 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/76803
    titleOracle Solaris Critical Patch Update : apr2013_SRU3
  • NASL familySolaris Local Security Checks
    NASL idSOLARIS10_X86_148384-01.NASL
    descriptionVulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6.
    last seen2020-06-01
    modified2020-06-02
    plugin id108146
    published2018-03-12
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108146
    titleSolaris 10 (x86) : 148384-01

Oval

accepted2013-12-30T04:00:26.103-05:00
classvulnerability
contributors
nameMerryl DMello
organizationHewlett-Packard
definition_extensions
  • commentSolaris 10 (SPARC) is installed
    ovaloval:org.mitre.oval:def:1440
  • commentSolaris 10 (x86) is installed
    ovaloval:org.mitre.oval:def:1926
descriptionUnspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality and integrity via vectors related to NFS client mounts and IPv6.
familyunix
idoval:org.mitre.oval:def:19352
statusaccepted
submitted2013-11-20T11:43:28.000-05:00
titleCRITICAL PATCH UPDATE APRIL 2013
version37