Vulnerability CVE-2011-3522
Published: 2011-10-18   Modified: 2012-02-13

Description:
Unspecified vulnerability in SysFW 8.0 on certain SPARC T3, Netra SPARC T3, Sun Fire, and Sun Blade based servers allows local users to affect confidentiality, related to Integrated Lights Out Manager CLI.

Type:

CWE-noinfo

CVSS2 => (AV:L/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.1/10
2.9/10
3.9/10
Exploit range
Attack complexity
Authentication
Local
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Oracle -> Sun fire x4270 
Oracle -> Netra sparc t3-1 
Oracle -> Sun fire x4270 m2 
Oracle -> Netra sparc t3-1b 
Oracle -> Sun fire x4470 
Oracle -> Sparc t3-1 
Oracle -> Sun fire x4470 m2 
Oracle -> Sparc t3-1b 
Oracle -> Sparc t3-4 
Oracle -> Sun blade x6270 
Oracle -> Sun blade x6270 m2 
Oracle -> Sun blade x6275 
Oracle -> Sun blade x6275 m2 
Oracle -> Sun blade x6440 m2 
Oracle -> Sun blade x6450 
Oracle -> Sun fire x2270 
Oracle -> Sun fire x2270 m2 
Oracle -> Sun fire x4170 
Oracle -> Sun fire x4170 m2 

 References:
http://xforce.iss.net/xforce/xfdb/70797
http://www.securitytracker.com/id?1026221
http://www.securityfocus.com/bid/50261
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html
http://secunia.com/advisories/46509
Copyright 2024, cxsecurity.com

 

Back to Top