CVE-2020-14871

Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability

Solaris

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle…

21. Okt 2020

Ausgewertete Quellen

• Hersteller
  https://www.oracle.com/security-alerts/cpuoct2020.html
• Hinweis
  http://packetstormsecurity.com/files/159961/SunSSH-Solaris-10-x86-Remote-Root.html
• Hinweis
  http://packetstormsecurity.com/files/160510/Solaris-SunSSH-11.0-x86-libpam-Remote-Root.html
• Hinweis
  http://packetstormsecurity.com/files/160609/Oracle-Solaris-SunSSH-PAM-parse_user_name-Buffer-Overflow.html
• Hinweis
  http://packetstormsecurity.com/files/163232/Solaris-SunSSH-11.0-Remote-Root.html
• Hinweis
  http://www.openwall.com/lists/oss-security/2021/03/03/1
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-14871
• CISA
  Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability
• NVD
  CVE-2020-14871