CVE-2006-4319

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-08-24 · updated 2026-06-16

Description

Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.

Affected products

Sun Solaris: 8.0, 8.0-beta, 9.0, 9.0-x86_update_2, 10.0, 10.0-hw2
Sunos: 5.8, 5.9, 5.10

References

http://secunia.com/advisories/21581
http://secunia.com/advisories/22295
http://securitytracker.com/id?1016727
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102519-1
http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
http://www.securityfocus.com/bid/19657
http://www.vupen.com/english/advisories/2006/3355
https://exchange.xforce.ibmcloud.com/vulnerabilities/28519
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A2164
http://secunia.com/advisories/21581
http://secunia.com/advisories/22295
http://securitytracker.com/id?1016727

Get alerted when CVE-2006-4319 or the next vulnerability affects your stack