CVE-2006-4306: High severity Sun SunOS vulnerability

Published Aug 23, 2006
·
Updated

Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control (RBAC) settings in the "File System Management" profile.

Affected Software

4 affected components
Sun SunOS=5.8
Sun Solaris=9.0
Sun Solaris=9.0
Sun Solaris=8.0

Event History

Aug 23, 2006
CVE Published
07:04 PM
CVE Published
via MITRE·11:00 PM
Data Sourced
via MITRE·11:00 PM
Description

Frequently Asked Questions

1

What is the severity of CVE-2006-4306?

The severity of CVE-2006-4306 is considered high due to the potential for local users to execute arbitrary commands.

2

How do I fix CVE-2006-4306?

To fix CVE-2006-4306, update your Sun Solaris systems to a version released after August 21, 2006 that addresses the RBAC configuration issue.

3

Who is affected by CVE-2006-4306?

CVE-2006-4306 affects users of Sun Solaris 8 and 9 operating systems prior to the August 21, 2006 update.

4

What are the potential impacts of CVE-2006-4306?

The potential impacts of CVE-2006-4306 include unauthorized command execution and possible system compromise by local users.

5

What are the default Role-Based Access Control (RBAC) settings in CVE-2006-4306?

The default Role-Based Access Control (RBAC) settings involved in CVE-2006-4306 are insufficiently restrictive, allowing exploitation by local users.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203