DisaCVEs & Vulnerabilities

1 CVEs affecting Disa products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.

1 CVEs→ All vendors

Most Affected Products

srr for solaris 1

CVE-2009-4211CRITICAL

The U.S. Defense Information Systems Agency (DISA) Security Readiness Review (SRR) script for the Solaris x86 platform executes files in arbitrary directories as root for filenames equal to (1) java, (2) openssl, (3) php, (4) snort, (5) tshark, (6) vncserver, or (7) wireshark, which allows local users to gain privileges via a Trojan horse program.

5 Dec 2009

9.3

CVSS

← PrevPage 1 / 1Next →

← All Vendors·CVE Database