{"schemaVersion":3,"id":"CVE-2020-2944","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Oracle Solaris. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).","dates":{"published":"2020-04-15T13:29:53.000Z","modified":"2024-09-27T18:47:39.464Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":8.8,"severity":"high","version":"3.0","versionLabel":"v3.0","source":"CVE.org","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.0","versionLabel":"v3.0","source":"CVE.org","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"3.0","versionLabel":"v3.0","source":"NVD","score":8.8,"severity":"high","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.2,"severity":"high","vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01802,"percentile":0.7832,"severity":"low","asOf":"2026-10-21T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-21T00:00:00.000Z","baselineScore":0.01802},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01802,"percentile":0.7832}],"last30":[{"date":"2026-09-21T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01802,"percentile":null},{"date":"2026-10-21T00:00:00.000Z","score":0.01802,"percentile":0.7832}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_D5F35A4F9315C8B7","name":"Exploit Reference (openwall.com)","source":"reference","url":"http://www.openwall.com/lists/oss-security/2020/04/15/3","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"REF_FCEAE1F875E85B56","name":"Exploit Reference (packetstormsecurity.com)","source":"reference","url":"http://packetstormsecurity.com/files/157280/Common-Desktop-Environment-1.6-Local-Privilege-Escalation.html","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"48359","name":"Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation","source":"exploit-database","url":"https://www.exploit-db.com/exploits/48359","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"local","platforms":["solaris"],"requiresAuth":null,"exploitdb":{"verified":false,"type":"local","platform":"solaris","file":"exploits/solaris/local/48359.c","codes":["CVE-2020-2944"]},"metasploit":null}],"exploitCount":3,"weaknesses":[{"id":"CWE-120","name":"Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')","description":"The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/120.html"}],"affected":[{"vendor":"oracle corporation","product":"solaris operating system","name":"Solaris Operating System","label":"solaris operating system","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"10","noFixRecorded":false,"fixedIn":null},{"text":"11","noFixRecorded":false,"fixedIn":null}],"versionsText":"10 | 11","eol":null,"hubHref":"/vendor/oracle_corporation/solaris_operating_system"},{"vendor":"oracle","product":"solaris","name":"Solaris","label":"solaris","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"10","noFixRecorded":false,"fixedIn":null},{"text":"11","noFixRecorded":false,"fixedIn":null}],"versionsText":"10 | 11","eol":{"isEol":true,"eolDate":"2018-01-01T00:00:00.000Z","matchMethod":"cpe","cycle":{"name":"10","label":"10","eolFrom":"2018-01-01T00:00:00.000Z","isLts":false,"isMaintained":true,"latestVersion":null},"product":{"name":"oracle-solaris","label":"Oracle Solaris","category":"os"}},"hubHref":"/vendor/oracle/solaris"}],"affectedCount":2,"eol":{"hasEol":true,"count":1},"references":[{"url":"https://www.oracle.com/security-alerts/cpuapr2020.html","label":"www.oracle.com/security-alerts/cpuapr2020.html","hostname":"www.oracle.com","tags":["X Refsource MISC","Patch","Vendor Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2020/04/15/3","label":"www.openwall.com/lists/oss-security/2020/04/15/3","hostname":"www.openwall.com","tags":["Mailing List","X Refsource MLIST","Exploit","Third Party Advisory"]},{"url":"http://seclists.org/fulldisclosure/2020/Apr/25","label":"seclists.org/fulldisclosure/2020/Apr/25","hostname":"seclists.org","tags":["Mailing List","X Refsource FULLDISC","Third Party Advisory"]},{"url":"http://packetstormsecurity.com/files/157280/Common-Desktop-Environment-1.6-Local-Privilege-Escalation.html","label":"packetstormsecurity.com/files/157280/Common-Desktop-Environment-1.6-Local-Privilege-Escalation.html","hostname":"packetstormsecurity.com","tags":["X Refsource MISC","Exploit","Third Party Advisory","VDB Entry"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2020-04-15T13:29:53.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-27T18:47:39.464Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":46,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-22T09:35:41.534Z","stale":false,"partial":false}}