93 matches found
CVE-2007-5225
creationtimestamp| type| source ---|---|--- 2008-03-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/5227...
Solaris 8/9/10 - 'fifofs I_PEEK' Local Kernel Memory Leak
/ $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi Lame integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory...
Solaris 9 (x86) : 117472-04
SunOS 5.9x86: connld, fifofs, fifonode patch. Date this patch was last updated by Sun : Oct/02/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Sun Solaris I_PEEK IOCTL处理器本地信息泄露漏洞
BUGTRAQ ID: 25905 CVECAN ID: CVE-2007-5225 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris内核的FIFO实现上存在漏洞，本地攻击者可能利用此漏洞获取内核的敏感信息。 Solaris中的FIFO内核ioctl处理器存在安全漏洞，该处理器使用IPEEK ioctl读取FIFO中的一些字节，但没有将这些字节从队列中删除。该命令中的一个参数代表所要读取的字节数，而该参数为整型整数值。由于没有正确地验证这个参数，因此负值就可以导致泄露大量的内核内存内容。 Sun Solaris 9.0 Sun Solaris 8.0 S...
CVE-2007-5225
CVE-2007-5225 is a Solaris local-privilege/ memory-leak issue caused by an integer signedness error in fifofs (FIFO filesystems) that allows a local user to read unspecified memory via a negative value to the I_PEEK ioctl on Solaris 8–10. For Solaris 10, patches exist: 127738-01 for x86 and 12773...
Solaris 10 (sparc) : 127737-01
SunOS 5.10: fifofs patch. Date this patch was last updated by Sun : Oct/02/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 9 (sparc) : 117471-04
SunOS 5.9: connld, fifofs, fifonode patch. Date this patch was last updated by Sun : Oct/02/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...
CVE-2006-5225
CVE-2006-5225 concerns the AAIportal web application (prior to version 1.4.0) with multiple SQL injection vulnerabilities. The issue allows remote attackers to execute arbitrary SQL commands via unspecified vectors, enabling partial confidentiality/integrity/availability impact as per CVSS metric...
CVE-2006-1654
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...
Directory traversal
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...
CVE-2006-1654
The vulnerability CVE-2006-1654 affects the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Windows prior to 20060402. It is a directory traversal flaw allowing remote attackers to read arbitrary files via a .. sequence in an HTTP GET request to TCP port 5225. The root cause is ...
CVE-2006-1654
Directory traversal vulnerability in the HP Color LaserJet 2500 Toolbox and Color LaserJet 4600 Toolbox on Microsoft Windows before 20060402 allows remote attackers to read arbitrary files via a .. dot dot in an HTTP GET request to TCP port 5225...
