Oracle Solaris CVE-2017-3623 Remote Code Execution Vulnerability

Bugtraq ID:	97778
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2017-3623
Remote:	Yes
Local:	No
Published:	Apr 18 2017 12:00AM
Updated:	Dec 12 2018 09:00AM
Credit:	Oracle
Vulnerable:	Oracle Solaris 9 Oracle Solaris 8 Oracle Solaris 7 Oracle Solaris 6 Oracle Solaris 10 IBM Vios 2.2.3 IBM Vios 2.2.1 4 IBM Vios 2.2 IBM Vios 2.2.4.0 IBM Vios 2.2.3.50 IBM Vios 2.2.3.4 IBM Vios 2.2.3.3 IBM Vios 2.2.3.2 IBM Vios 2.2.3.0 IBM Vios 2.2.2.6 IBM Vios 2.2.2.5 IBM Vios 2.2.2.4 IBM Vios 2.2.2.0 IBM Vios 2.2.1.9 IBM Vios 2.2.1.8 IBM Vios 2.2.1.3 IBM Vios 2.2.1.1 IBM Vios 2.2.1.0 IBM Vios 2.2.0.13 IBM Vios 2.2.0.12 IBM Vios 2.2.0.11 IBM Vios 2.2.0.10 IBM Aix 7.2 IBM AIX 7.1 IBM AIX 6.1 IBM AIX 5.3
Not Vulnerable:

Oracle Solaris CVE-2017-3623 Remote Code Execution Vulnerability

Oracle Solaris is prone to a remote code execution vulnerability.

The vulnerability can be exploited over the 'Multiple' protocol. The 'Kernel RPC' sub component is affected.

An attacker can exploit this issue to execute arbitrary code within the context of the target server.

Oracle Solaris CVE-2017-3623 Remote Code Execution Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Oracle Solaris CVE-2017-3623 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Oracle Solaris CVE-2017-3623 Remote Code Execution Vulnerability

References:

• Oracle Homepage (Oracle)
  
• Oracle patches Solaris 10 hole exploited by NSA spyware tool �?? and 298 other sec (The Register)
  
• user.tool.ebbisland.COMMON (x0rz)
  
• Oracle Critical Patch Update Advisory - April 2017 (Oracle)
  
• Security Bulletin: Vulnerability in Oracle Solaris affects AIX (CVE-2017-3623) (IBM)