Vulnerability in Sun Sunos
CVE-2010-2632
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.8 (High). Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.350 (98.4th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.350 · newest: 0.350 · change: 0.000
Affected products
- Sun Sunos — versions 5.8, 5.9, 5.10
Public proof-of-concept exploits
References
- secunia.com/advisories/55212 (third-party-advisory)
- securityreason.com/achievement_securityalert/89 (third-party-advisory)
- secunia.com/advisories/43433 (third-party-advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/64798 (vdb-entry)
- kb.juniper.net/InfoCenter/index
- secunia.com/advisories/42984 (third-party-advisory)
- support.avaya.com/css/P8/documents/100127892
- securityreason.com/achievement_securityalert/97 (third-party-advisory)
- www.securitytracker.com/id (vdb-entry)
- www.vupen.com/english/advisories/2011/0151 (vdb-entry)
Frequently asked questions
- What is CVE-2010-2632?
- CVE-2010-2632 is a vulnerability in Sun Sunos. Published 2011-01-19.
- Is CVE-2010-2632 known to be exploited?
- 6 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.