Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability

Bugtraq ID:	50251
Class:	Unknown
CVE:	CVE-2011-3534
Remote:	Yes
Local:	No
Published:	Oct 18 2011 12:00AM
Updated:	Oct 28 2011 09:22PM
Credit:	Oracle
Vulnerable:	Sun Solaris 9_x86 Sun Solaris 9_sparc Sun Solaris 9 Express Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 8 Express Sun Solaris 11 Express Sun Solaris 10_x86 Sun Solaris 10_sparc Sun Solaris 10 Express Avaya Interactive Response 4.0 Avaya CMS Server 16.2 Avaya CMS Server 16.1 Avaya CMS Server 16.0 Avaya CMS Server 15.0 AUX Avaya CMS Server 15.0
Not Vulnerable:

Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability

Oracle Sun Solaris is prone to a remote vulnerability.

The vulnerability can be exploited over the 'RPC' protocol. The 'Network Status Monitor (statd(1M))' sub component is affected.

This vulnerability affects the following supported versions:
8, 9, 10, 11 Express

Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

Oracle Sun Solaris CVE-2011-3534 Remote Vulnerability

References:

• ASA-2011-333 Oracle Critical Update Combined CVEs (October 2011) (Avaya)
  
• Oracle Critical Patch Update Advisory - October 2011 (Oracle)