fkie_cve-2010-4435
Vulnerability from fkie_nvd
Published
2011-01-19 17:00
Modified
2025-04-11 00:51
Severity ?
Summary
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.
References
secalert_us@oracle.comhttp://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc
secalert_us@oracle.comhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395
secalert_us@oracle.comhttp://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395
secalert_us@oracle.comhttp://osvdb.org/70569
secalert_us@oracle.comhttp://secunia.com/advisories/42984Vendor Advisory
secalert_us@oracle.comhttp://secunia.com/advisories/43258Vendor Advisory
secalert_us@oracle.comhttp://securityreason.com/securityalert/8069
secalert_us@oracle.comhttp://www.exploit-db.com/exploits/16137Exploit
secalert_us@oracle.comhttp://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlVendor Advisory
secalert_us@oracle.comhttp://www.securityfocus.com/archive/1/516284/100/0/threaded
secalert_us@oracle.comhttp://www.securityfocus.com/archive/1/516304/100/0/threaded
secalert_us@oracle.comhttp://www.securityfocus.com/bid/45853
secalert_us@oracle.comhttp://www.securityfocus.com/bid/46261
secalert_us@oracle.comhttp://www.securitytracker.com/id?1024975
secalert_us@oracle.comhttp://www.vupen.com/english/advisories/2011/0151Vendor Advisory
secalert_us@oracle.comhttp://www.vupen.com/english/advisories/2011/0352Vendor Advisory
secalert_us@oracle.comhttp://www.zerodayinitiative.com/advisories/ZDI-11-062/
secalert_us@oracle.comhttps://exchange.xforce.ibmcloud.com/vulnerabilities/64797
secalert_us@oracle.comhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12794
af854a3a-2127-422b-91ae-364da2661108http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc
af854a3a-2127-422b-91ae-364da2661108http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395
af854a3a-2127-422b-91ae-364da2661108http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395
af854a3a-2127-422b-91ae-364da2661108http://osvdb.org/70569
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/42984Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/43258Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/8069
af854a3a-2127-422b-91ae-364da2661108http://www.exploit-db.com/exploits/16137Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.htmlVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/516284/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/516304/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/45853
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/46261
af854a3a-2127-422b-91ae-364da2661108http://www.securitytracker.com/id?1024975
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2011/0151Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2011/0352Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.zerodayinitiative.com/advisories/ZDI-11-062/
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/64797
af854a3a-2127-422b-91ae-364da2661108https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12794
Impacted products
Vendor Product Version
sun sunos 5.8
sun sunos 5.9
sun sunos 5.10


To clipboard 

{
   configurations: [
      {
         nodes: [
            {
               cpeMatch: [
                  {
                     criteria: "cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*",
                     matchCriteriaId: "A2475113-CFE4-41C8-A86F-F2DA6548D224",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:sun:sunos:5.9:*:*:*:*:*:*:*",
                     matchCriteriaId: "A1E585DC-FC74-4BB0-96B7-C00B6DB610DF",
                     vulnerable: true,
                  },
                  {
                     criteria: "cpe:2.3:o:sun:sunos:5.10:*:*:*:*:*:*:*",
                     matchCriteriaId: "E75493D0-F060-4CBA-8AB0-C4FE8B2A8C9B",
                     vulnerable: true,
                  },
               ],
               negate: false,
               operator: "OR",
            },
         ],
      },
   ],
   cveTags: [],
   descriptions: [
      {
         lang: "en",
         value: "Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC.  NOTE: the previous information was obtained from the January 2011 CPU.  Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.",
      },
      {
         lang: "es",
         value: "Una vulnerabilidad no especificada en Solaris de Oracle versiones 8, 9 y 10, permite a los atacantes remotos afectar la confidencialidad, integridad y disponibilidad, relacionadas con CDE Calendar Manager Service Daemon and RPC. NOTA: la información anterior fue obtenida de la CPU de enero de 2011. Oracle no ha comentado sobre las afirmaciones de otros proveedores de software que esto afecta a otros sistemas operativos, como HP-UX, o las afirmaciones de un tercero confiable de que se trata de un desbordamiento de búfer en el archivo rpc.cmsd por medio de cadenas ASCII largas codificadas en XDR en la llamada RPC 10.",
      },
   ],
   id: "CVE-2010-4435",
   lastModified: "2025-04-11T00:51:21.963",
   metrics: {
      cvssMetricV2: [
         {
            acInsufInfo: false,
            baseSeverity: "HIGH",
            cvssData: {
               accessComplexity: "LOW",
               accessVector: "NETWORK",
               authentication: "NONE",
               availabilityImpact: "COMPLETE",
               baseScore: 10,
               confidentialityImpact: "COMPLETE",
               integrityImpact: "COMPLETE",
               vectorString: "AV:N/AC:L/Au:N/C:C/I:C/A:C",
               version: "2.0",
            },
            exploitabilityScore: 10,
            impactScore: 10,
            obtainAllPrivilege: false,
            obtainOtherPrivilege: false,
            obtainUserPrivilege: false,
            source: "nvd@nist.gov",
            type: "Primary",
            userInteractionRequired: false,
         },
      ],
   },
   published: "2011-01-19T17:00:02.123",
   references: [
      {
         source: "secalert_us@oracle.com",
         url: "http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://osvdb.org/70569",
      },
      {
         source: "secalert_us@oracle.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/42984",
      },
      {
         source: "secalert_us@oracle.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/43258",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://securityreason.com/securityalert/8069",
      },
      {
         source: "secalert_us@oracle.com",
         tags: [
            "Exploit",
         ],
         url: "http://www.exploit-db.com/exploits/16137",
      },
      {
         source: "secalert_us@oracle.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://www.securityfocus.com/archive/1/516284/100/0/threaded",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://www.securityfocus.com/archive/1/516304/100/0/threaded",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://www.securityfocus.com/bid/45853",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://www.securityfocus.com/bid/46261",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://www.securitytracker.com/id?1024975",
      },
      {
         source: "secalert_us@oracle.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.vupen.com/english/advisories/2011/0151",
      },
      {
         source: "secalert_us@oracle.com",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.vupen.com/english/advisories/2011/0352",
      },
      {
         source: "secalert_us@oracle.com",
         url: "http://www.zerodayinitiative.com/advisories/ZDI-11-062/",
      },
      {
         source: "secalert_us@oracle.com",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/64797",
      },
      {
         source: "secalert_us@oracle.com",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12794",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02702395",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://osvdb.org/70569",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/42984",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://secunia.com/advisories/43258",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://securityreason.com/securityalert/8069",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Exploit",
         ],
         url: "http://www.exploit-db.com/exploits/16137",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/516284/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/archive/1/516304/100/0/threaded",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/45853",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securityfocus.com/bid/46261",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.securitytracker.com/id?1024975",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.vupen.com/english/advisories/2011/0151",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         tags: [
            "Vendor Advisory",
         ],
         url: "http://www.vupen.com/english/advisories/2011/0352",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "http://www.zerodayinitiative.com/advisories/ZDI-11-062/",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://exchange.xforce.ibmcloud.com/vulnerabilities/64797",
      },
      {
         source: "af854a3a-2127-422b-91ae-364da2661108",
         url: "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12794",
      },
   ],
   sourceIdentifier: "secalert_us@oracle.com",
   vulnStatus: "Deferred",
   weaknesses: [
      {
         description: [
            {
               lang: "en",
               value: "NVD-CWE-noinfo",
            },
         ],
         source: "nvd@nist.gov",
         type: "Primary",
      },
   ],
}


Log in or create an account to share your comment.

Security Advisory comment format.

This schema specifies the format of a comment related to a security advisory.

UUIDv4 of the comment
UUIDv4 of the Vulnerability-Lookup instance
When the comment was created originally
When the comment was last updated
Title of the comment
Description of the comment
The identifier of the vulnerability (CVE ID, GHSA-ID, PYSEC ID, etc.).



Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.