CVE-2007-6413

Published: Dec 17, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Sun Solaris 10 with the 120011-04 and 120012-04 patches, and later 120011-* and 120012-* patches, allows remote attackers to bypass certain netgroup restrictions and obtain root access to a filesystem via NFS requests from a client root user.

Affected (2)

Products: Sun: Solaris

Sun

1 product

Solaris

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Sun Solaris	Version 10
Sun Solaris	Version 10

Related CWEs

CWE-264

References (16)

http://osvdb.org/40829

Source: cve@mitre.org

http://secunia.com/advisories/28096

Source: cve@mitre.org

Vendor Advisory

http://sunsolve.sun.com/search/document.do?assetkey=1-26-103162-1

Source: cve@mitre.org

Patch

http://sunsolve.sun.com/search/document.do?assetkey=1-66-201317-1

Source: cve@mitre.org

http://www.securityfocus.com/bid/26872

Source: cve@mitre.org

http://www.securitytracker.com/id?1019102

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/4218

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39033

Source: cve@mitre.org

http://osvdb.org/40829