CVE-2007-3094: Critical severity Sun SunOS vulnerability

Published Jun 6, 2007

Updated

Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server.

Affected Software

6 affected components

Sun SunOS=5.8

Sun Solaris=9.0

Sun SunOS=5.10

Sun SunOS=5.9

Sun Solaris=8.0

Sun Solaris=10.0

Remediation

Patch Available

http://www.securityfocus.com/bid/24326

Event History

Jun 6, 2007

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-3094?

CVE-2007-3094 is considered to have a high severity level due to its potential for remote code execution by authenticated users.

How do I fix CVE-2007-3094?

To fix CVE-2007-3094, apply the latest patches provided by Oracle for Solaris versions 8, 9, and 10.

What versions of Solaris are affected by CVE-2007-3094?

CVE-2007-3094 affects Solaris 8 through 10, specifically versions 8.0, 9.0, and 10.0, as well as SunOS 5.8, 5.9, and 5.10.

What type of vulnerability is CVE-2007-3094?

CVE-2007-3094 is an unspecified vulnerability in the authentication mechanism of the Solaris Management Console.

Can CVE-2007-3094 be exploited remotely?

Yes, CVE-2007-3094 can be exploited remotely by authenticated users to execute arbitrary code.