Vulnerabilities > CVE-2013-1496 - Local Security vulnerability in Oracle Sun Products Suite
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
COMPLETE Summary
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498.
Nessus
NASL family Solaris Local Security Checks NASL id SOLARIS10_X86_149166.NASL description Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel/IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS). This plugin has been deprecated and either replaced with individual 149166 patch-revision plugins, or deemed non-security related. last seen 2019-02-21 modified 2018-07-30 plugin id 64530 published 2013-02-10 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=64530 title Solaris 10 (x86) : 149166-01 (deprecated) NASL family Solaris Local Security Checks NASL id SOLARIS10_X86_149166-01.NASL description Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel/IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS). last seen 2020-06-01 modified 2020-06-02 plugin id 108174 published 2018-03-12 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108174 title Solaris 10 (x86) : 149166-01 NASL family Solaris Local Security Checks NASL id SOLARIS10_149165.NASL description Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel/IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS). This plugin has been deprecated and either replaced with individual 149165 patch-revision plugins, or deemed non-security related. last seen 2019-02-21 modified 2018-07-30 plugin id 64612 published 2013-02-13 reporter Tenable source https://www.tenable.com/plugins/index.php?view=single&id=64612 title Solaris 10 (sparc) : 149165-01 (deprecated) NASL family Solaris Local Security Checks NASL id SOLARIS_APR2013_SRU0.NASL description This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Remote Execution Service). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris. (CVE-2013-0413) - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel/IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS). (CVE-2013-1496) - Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel/IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS). (CVE-2013-1498) last seen 2020-06-01 modified 2020-06-02 plugin id 76802 published 2014-07-26 reporter This script is Copyright (C) 2014-2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/76802 title Oracle Solaris Critical Patch Update : apr2013_SRU0 NASL family Solaris Local Security Checks NASL id SOLARIS10_149165-01.NASL description Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel/IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS). last seen 2020-06-01 modified 2020-06-02 plugin id 107680 published 2018-03-12 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/107680 title Solaris 10 (sparc) : 149165-01
Oval
| accepted | 2013-12-30T04:00:21.577-05:00 | ||||||||
| class | vulnerability | ||||||||
| contributors |
| ||||||||
| definition_extensions |
| ||||||||
| description | Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/IO, a different vulnerability than CVE-2013-1498. | ||||||||
| family | unix | ||||||||
| id | oval:org.mitre.oval:def:19164 | ||||||||
| status | accepted | ||||||||
| submitted | 2013-11-20T11:43:28.000-05:00 | ||||||||
| title | CRITICAL PATCH UPDATE APRIL 2013 | ||||||||
| version | 36 |