CVE-2007-2529 — Solaris vulnerability

4 documents4 sources
Severity
7.2HIGHNVD
EPSS
0.1%
top 81.04%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SUN SolarisSUN Sunos
Timeline
PublishedMay 9
Latest updateMay 1

Description

Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) and possibly gain privileges via a certain argument, related to ACE_SETACL.

CVSS vector

AV:L/AC:L/C:C/I:C/A:CExploitability: 3.9 | Impact: 10.0

Affected Packages2 packages

▶NVDsun/solaris10.0
▶NVDsun/sunos5.10

Patches

Patch: secunia.com ↗Patch: sunsolve.sun.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-r7hv-v69f-fvfr: Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) an↗2022-05-01
▶
OSV
CVE-2007-5156: Incomplete blacklist vulnerability in editor/filemanager/upload/php/upload↗2007-10-01
▶
CVEList
CVE-2007-2529: Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) an↗2007-05-09
▶
CVE-2007-2529 — SUN Solaris vulnerability | cvebase