CVE-2007-6413: Critical severity Sun Solaris vulnerability

Published Dec 17, 2007

Updated

Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011- and 120012- patches, allows remote attackers to bypass certain netgroup restrictions and obtain root access to a filesystem via NFS requests from a client root user.

Affected Software

2 affected components

Sun Solaris=10

Remediation

Patch Available

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103162-1

Event History

Dec 17, 2007

CVE Published

11:46 PM

Dec 18, 2007

CVE Published

via MITRE·04:00 AM

Data Sourced

via MITRE·04:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-6413?

CVE-2007-6413 has a critical severity level as it allows remote attackers to bypass netgroup restrictions and potentially obtain root access.

How do I fix CVE-2007-6413?

To fix CVE-2007-6413, patch your Sun Solaris 10 installation with the updates provided in patches 120011-04, 120012-04, or later versions.

What systems are affected by CVE-2007-6413?

CVE-2007-6413 affects systems running Sun Solaris 10 on both x86 and SPARC architectures.

What type of attack does CVE-2007-6413 enable?

CVE-2007-6413 enables remote attackers to execute unauthorized actions by exploiting NFS requests from a client root user.

Is user authentication impacted by CVE-2007-6413?

Yes, CVE-2007-6413 impacts user authentication by allowing unauthorized access to filesystems through bypassing netgroup restrictions.