CVE-2010-3503

Description

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su.

Affected products

• oracle / opensolaris
• oracle / solaris10 – 10

Exploits & proofs of concept

• exploit-dbOracle Solaris - 'su' Crashby prdelka

References

• VENDOR_ADVISORYhttp://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html
• MISChttp://www.us-cert.gov/cas/techalerts/TA10-287A.html