CVE-2014-6524

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility.

An unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility.

In Oracle Solaris (Utility component), a difficult-to-exploit vulnerability allows a local low-privileged attacker to unauthorizedly create, delete, or modify critical data and access all Solaris data. The vulnerability affects additional products (scope change).

In Oracle Solaris (component Filesystems) version 11.4, an easily exploitable vulnerability allows a low-privileged attacker with logon to the infrastructure where Oracle Solaris executes to cause a hang or frequently repeatable crash (complete DOS) of Oracle Solaris. CVSS 3.1 Base Score 5.5 (Availability impacts).

Vulnerability in Oracle Solaris product of Oracle Systems, component Utility. Affects version 11.4. A difficult-to-exploit vulnerability allows a low-privileged attacker with network access via RAD to gain unauthorized access to critical data and partial ability to update, insert, or delete it. Attacks may significantly impact additional products (scope change).

A vulnerability in Oracle Solaris (component: Utility) in version 11.4. A difficult-to-exploit vulnerability allows a low privileged attacker with local access to compromise Oracle Solaris (CVSS 7.0).

Vulnerability in Oracle Solaris (Filesystems component) allows a low-privileged attacker with local access to take over the system. Attacks may impact additional products (scope change).

Vulnerability in Oracle Solaris (component: Filesystems) version 11.4. A low-privileged attacker with local access can unauthorized create, delete, or modify critical data and cause a complete denial of service (DOS).