Solaris 2.6 (x86) : 108805-02

SunOS 5.6x86: /usr/bin/tip patch. Date this patch was last updated by Sun : Jun/19/01 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Linux 2.6 Netfilter TCP Option Matching DoS

It was possible to crash the remote host by sending a specially malformed TCP/IP packet with invalid TCP options. Only version 2.6 of the Linux kernel is known to be affected by this problem. An attacker may use this flaw to disable this host remotely. C Tenable Network Security, Inc. Ref: From:...

CVE-2004-0228

CVE-2004-0228 refers to an integer signedness error in the cpufreq /proc handler (cpufreq_procctl) of the Linux 2.6 kernel, enabling local users to escalate privileges to kernel level. The issue is discussed in multiple advisories (e.g., SUSE, Gentoo GLSA 200407-02, Fedora 2004-111) as part of Li...

PaX 2.6 Kernel Patch - Denial of Service

/ source: https://www.securityfocus.com/bid/10264/info PaX for 2.6 series Linux kernels has been reported prone to a local denial of service vulnerability. The issue is reported to present itself when PaX Address Space Layout Randomization Layout ASLR is enabled. The vulnerability may be exploite...

DSA-427 linux-kernel-2.4.17-mips+mipsel - missing boundary check

Bulletin has no description...

CVE-2003-1066

Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service syslogd crash and possibly execute arbitrary code via long syslog UDP packets...

CVE-2003-1059

Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access...

CVE-2001-1373

Vulnerability (CVE-2001-1373) affects Zone Labs ZoneAlarm 2.6 and earlier, and ZoneAlarm Pro 2.6 and 2.4, where the MailSafe component does not block prohibited file types with long file names. Root cause: the filter fails to enforce type/name restrictions for attachments, enabling remote attacke...

CVE-2003-0091

Stack-based buffer overflow in the bsdqueue function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege...

CVE-2003-1078

The FTP client for Solaris 2.6, 7, and 8 with the debug -d flag enabled displays the user password on the screen during login...

CVE-2002-2037

The Cisco Media Gateway Controller MGC in 1 SC2200 7.4 and earlier, 2 VSC3000 9.1 and earlier, 3 PGW 2200 9.1 and earlier, 4 Billing and Management Server BAMS and 5 Voice Services Provisioning Tool VSPT runs on default installations of Solaris 2.6 with unnecessary services and without the latest...

CVE-2001-1218

Microsoft Internet Explorer for Unix 5.0SP1 is affected. Local users can cause a denial of service (crash) in the CDE or the X server on Solaris 2.6 by rapidly scrolling Chinese characters or maximizing the window. The CVSS data indicates a Low base score (2.1) with LOCAL access, no confidentiali...

CVE-1999-1118

ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters...

CVE-2001-0779

CVE-2001-0779 describes a remote buffer overflow in the rpc.yppasswdd (yppasswd) service, affecting Solaris 2.6/7/8 (and related implications for AIX per vendor notes). The vulnerability allows a remote attacker to gain root privileges by supplying a long username string, as documented by multipl...

CVE-2001-0652

CVE-2001-0652 is a heap buffer overflow in the Solaris xlock utility (SunOS/Solaris 2.6–8) that allows a local user to gain root privileges by supplying an overly long environment value in XFILESEARCHPATH or XUSERFILESEARCHPATH. The underlying issue is a lack of length checks when copying the env...

CVE-1999-1432

CVE-1999-1432 affects Solaris Powermanagement on Solaris 2.4–2.6; the xlock authentication process does not start until after sys-suspend finishes, allowing a physically proximate attacker to type into the last active application during the restore window and potentially gain higher privileges. A...

CVE-1999-1027

Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program...

CVE-1999-1118

CVE-1999-1118 affects Solaris 2.6: local users can cause a denial of service by modifying certain TCP/IP parameters via ndd. The available sources describe the vulnerability and its impact as a local attack with partial availability impact, but no remediation patch/version is provided in the supp...

CVE-2002-0088

CVE-2002-0088 affects Sun Solaris admintool (2.6, 7, 8). A buffer overflow in the installation path handling allows a local user to gain root privileges by supplying a long media installation path. The underlying cause is insufficient bounds checking on the installation path. Impact is local priv...

oracle8.exploit.txt

---------- Forwarded message ---------- Date: Sat, 13 Nov 1999 15:01:08 -0600 From: [email protected] To: [email protected] Subject: BOUNCE [email protected]: Approval required: From [email protected] Sat Nov 13 15:01:06 1999 Received: from sword.damocles.com...