Unscored severity · published Jan 8, 2010
CVE-2010-0271
hald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during unspecified attempts to write to the auditing log, which makes it easier for…
–
CVSS
0.3%
EPSS
No
On KEV
Description
hald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware Abstraction Layer (HAL) specification.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OP
Opensolaris · Sun
snv_51; snv_52; snv_53; snv_54; snv_55; snv_56; +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-0271
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-0271
Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-66-274830-1
www.securityfocus.com
http://www.securityfocus.com/bid/37656
www.securitytracker.com
http://www.securitytracker.com/id?1023416
www.vupen.com
http://www.vupen.com/english/advisories/2010/0076
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/55461
More from Opensolaris
9.8
CVE-2016-1291
Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allow remote attackers to execute arbitrary code via crafted deserialized…
9.8
CVE-2016-1329
Cisco NX-OS 6.0(2)U6(1) through 6.0(2)U6(5) on Nexus 3000 devices and 6.0(2)A6(1) through 6.0(2)A6(5) and 6.0(2)A7(1) on Nexus 3500 devices has hardcoded credentials, which allows…
9.8
CVE-2015-6319
SQL injection vulnerability in the web-based management interface on Cisco RV220W devices allows remote attackers to execute arbitrary SQL commands via a crafted header in an HTTP…
8.8
CVE-2016-1302
Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3h) and 1.1 before 1.1(1j) and Nexus 9000 ACI Mode switches with software before…
8.1
CVE-2016-1290
The web API in Cisco Prime Infrastructure 1.2.0 through 2.2(2) and Cisco Evolved Programmable Network Manager (EPNM) 1.2 allows remote authenticated users to bypass intended RBAC…