Sun Solaris Solstice AdminSuite daemon buffer overflow

Buffer overflow in sadmind admbuildpath function...

CVE-2008-4556: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the admbuildpath function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request...

Solaris 7 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...

Solaris 5.8 (x86) : 108881-11

Solstice AdminSuite 3.0.1x86: Auditing compat mode passwd autohom. Date this patch was last updated by Sun : May/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 2.5.1 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 2.6 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...

Solaris 2.6 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 5.8 (x86) : 109414-09

Solstice AdminSuite 3.0.1x86: NIS+ compat passwd autohome rights. Date this patch was last updated by Sun : May/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

CVE-1999-1425

CVE-1999-1425 affects Solaris Solstice AdminSuite (AdminSuite) 2.1. The documented issue is that NIS map source files have incorrect write permissions, enabling local users to modify /etc/passwd and potentially gain privileges. The connected documents do not expand on root cause beyond the stated...

CVE-1999-1427

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges...

CVE-1999-1427

Affected software: Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. Vulnerability: insecure creation of lock files. Root cause: insecure lock file handling allows local users to gain root privileges. Impact: local privilege escalation to root on affected systems. Remediation: not provided in...

CVE-1999-1425

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-1428

The CVE-1999-1428 entry affects Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. The vulnerability is a local privilege escalation in the Database Manager, which runs with setgid bin privileges; successful exploitation would grant elevated privileges to local users. The underlying issue is t...

CVE-1999-1424

Technical details (affected products/versions/root cause/mitigation) are not provided in the supplied connected documents; monitor for updates.

CVE-1999-1424

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...

CVE-1999-1426

The CVE-1999-1426 entry describes a local privilege impact in Solaris Solstice AdminSuite 2.1, where the updater for the NIS database follows symbolic links, allowing a local user to overwrite arbitrary files. The provided documents do not specify affected build versions beyond AdminSuite 2.1, no...

CVE-1999-1426

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-1999-1428

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges...

CVE-1999-1425: Undefined Security Weakness

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-1428: Undefined Security Weakness

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges...