Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Oracle Solaris 10 can be taken over by low‑privilege user

CVE-2019-2832 · published 7 years ago
Summary

The Solaris 10 operating system can let a user with only basic login rights gain full control of the system. This can affect any other applications running on that Solaris server. Apply the latest security updates from Oracle as soon as possible and limit who can log on to the server.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle solaris 10
cpe:2.3:o:oracle:solaris:10:*:*:*:*:*:*:*
Original advisory text
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulne...
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment). The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
References
Fix within
Internet-facing 14 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker full control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Timeline
Published23 Jul 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-2832 · NVD
Track software like this
Free during beta