CVE-2011-3535

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam™
Beyond Security®

SecuriTeam™ Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

	SecuriTeam™ in Your Inbox

	E-mail this CVE-2011-3535 to a friend

New vulnerability?
New tool?
Tell us

Credit:
The original article can be found at: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-3535
The original article can be found at: http://www.securityfocus.com/bid/50255

Website Security Scan	Code Vulnerability Test	Network Assessment Tool
Detect hidden vulnerabilities	Exhaustive automated testing	Real-time, continuous security
Get guidance from professionals	of internal or 3rd party code.	scanning for your entire network

Check for CVE-2011-3535

Vulnerability Assessment and Management.
Automated Pen Testing for 50 to 50,000 nodes
beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* Oracle Sun Solaris 9_x86
* Oracle Sun Solaris 9_sparc
* Oracle Sun Solaris 9 Express
* Oracle Sun Solaris 8_x86
* Oracle Sun Solaris 8_sparc
* Oracle Sun Solaris 8 Express
* Oracle Sun Solaris 11 Express
* Oracle Sun Solaris 10_x86
* Oracle Sun Solaris 10_sparc
S * Oracle un Solaris 10 Express

Oracle Sun Solaris is prone to a remote vulnerability.
The vulnerability can be exploited over the 'RPC' protocol. The 'Remote Quota Server (rquotad(1M))' sub component is affected.

Vendor Status:
Oracle has issued an update to correct this vulnerability.

Patch Availability:
http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html

CVE Information:
CVE-2011-3535

Disclosure Timeline:
2011-November-10 Rev 4. Changed CVSS Score for CVE-2011-3512 to 6.5
2011-October-20 Rev 3. Changed CVSS Score for CVE-2011-2301 to 8.5
2011-October-18 Rev 2. Changed CVE for Oracle Thesaurus Management System from CVE-2011-3538 to CVE-2011-2323
2011-October-18 Rev 1. Initial Release

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus