CVE-2019-3010
Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
- Affected products
- Oracle Solaris, Xscreensaver
- Oracle Solaris
- = 11
- Fix
- Available
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 13.4% (96th percentile)
- NVD status
- Analyzed
- Published
- 2019-10-16
CVE-2019-3010 at NVD
9 known exploits for CVE-2019-3010
Proof-of-concept code and exploit modules indexed by Sploitus
advisories
raptor_infiltrate20
Solaris xscreensaver Privilege Escalation
Solaris 11.4 - xscreensaver Privilege Escalation
Solaris 11.4 - xscreensaver Privilege Escalation
Solaris xscreensaver 11.4 - Privilege Escalation Exploit
Solaris xscreensaver 11.4 - Privilege Escalation
Solaris xscreensaver 11.4 - Privilege Escalation
Solaris xscreensaver log Privilege Escalation