NVD

Id
15690  
Name
CVE-2010-4435  
Description
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from other software vendors that this affects other operating systems, such as HP-UX, or claims from a reliable third party that this is a buffer overflow in rpc.cmsd via long XDR-encoded ASCII strings in RPC call 10.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2011-01-19  
Modified Date
2011-09-21  
Seq
2010-4435  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
88783 15690 CVE-2010-4435 http://aix.software.ibm.com/aix/efixes/security/cmsd_advisory.asc  View
88784 15690 CVE-2010-4435 HPSBUX02628  View
88785 15690 CVE-2010-4435 oval:org.mitre.oval:def:12794  View
88786 15690 CVE-2010-4435 8069  View
88787 15690 CVE-2010-4435 16137  View
88788 15690 CVE-2010-4435 http://www.oracle.com/technetwork/topics/security/cpujan2011-194091.html  View
88789 15690 CVE-2010-4435 20110208 ZDI-11-062: Multiple Vendor Calendar Manager RPC Service Remote Code Execution Vulnerability  View
88790 15690 CVE-2010-4435 20110208 CVE-2010-4435 - Multiple Vendor Calendar Manager Remote Code Execution  View
88791 15690 CVE-2010-4435 45853  View
88792 15690 CVE-2010-4435 46261  View
88793 15690 CVE-2010-4435 1024975  View
88794 15690 CVE-2010-4435 ADV-2011-0151  View
88795 15690 CVE-2010-4435 ADV-2011-0352  View
88796 15690 CVE-2010-4435 http://www.zerodayinitiative.com/advisories/ZDI-11-062/  View
88797 15690 CVE-2010-4435 solaris-cde-code-execution(64797)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30841 JVNDB-2011-001080 Oracle Solaris の CDE Calendar Manager Service Daemon および RPC における脆弱性 Oracle Solaris には、CDE Calendar Manager Service Daemon および RPC に関する処理に不備があるため、機密性、完全性、可用性に影響のある脆弱性が存在します。 CVE-2010-4435 47015 CVE-2010-4435 15690 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001080.html 2011-01-18 2011-02-16 View