CVE-2017-3632

Critical

Published: 08/08/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite, affecting the CDE Calendar subcomponent, allows an unauthenticated attacker with network access via TCP to compromise Solaris. Affected versions are 10 and 11.

Risk Assessment

An attacker can easily exploit this vulnerability, potentially leading to complete takeover of the Solaris system, exposing the organization to significant risks regarding confidentiality, integrity, and availability of data.

Recommendation

It is recommended to update Solaris to the latest version and implement appropriate security measures to minimize the risk of exploitation of this vulnerability.

Original NVD description (English source)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Solaris. Successful attacks of this vulnerability can result in takeover of Solaris. Note: CVE-2017-3632 is assigned to the "EASYSTREET" vulnerability. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).