Input validation error in Oracle Solaris - CVE-2011-2304
Published: October 19, 2011 / Updated: August 11, 2020
Vulnerability identifier: #VU44599
CSH Severity: Medium
CVSS v4: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-2304
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to gain access to sensitive information.
Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality, related to Network Services Library (libnsl).
Affected software
Oracle Solaris
How to mitigate CVE-2011-2304
Install update from vendor's website.