Sun Solaris DTrace动态追踪框架信息泄露漏洞

BUGTRAQ ID: 27942 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 DTrace（请见dtrace1M）动态追踪框架中的安全漏洞可能允许给予了PRIVDTRACEUSER或PRIVDTRACEPROC权限（请见privileges5）的本地用户或非全局区执行一些内核级追踪，然后这些用户就可以访问敏感信息。 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法：...

CVE-2008-0938

Unspecified vulnerability in the dynamic tracing framework DTrace in Sun Solaris 10 allows local users with PRIVDTRACEUSER or PRIVDTRACEPROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126...

CVE-2008-0938

Unspecified vulnerability in the dynamic tracing framework DTrace in Sun Solaris 10 allows local users with PRIVDTRACEUSER or PRIVDTRACEPROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126...

CVE-2008-0938

Technical details for CVE-2008-0938 are not publicly available in the provided connected documents. The entries reference Solaris DTrace and privilege-based access, but no concrete affected versions, root cause, or remediation are included here. Monitor for updates.

Sun Solaris DTrace本地拒绝服务漏洞

BUGTRAQ ID: 25151 CNCAN ID:CNCAN-2007080107 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的DTrace存在安全问题，本地攻击者可以利用漏洞运行部分DTrace程序引起系统不稳定或崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10.0 x86 Sun Solaris 10 补丁下载： Sun Solaris 10 Sun 125100-10 http://sunsolve.sun.com/search/document.do?assetkey=1-21-125100-10-1...

Design/Logic Flaw

Unspecified vulnerability in the dynamic tracing framework DTrace on Sun Solaris 10 before 20070730 allows local users with PRIVDTRACEUSER privileges to cause a denial of service panic or hang via unspecified use of certain DTrace programs...

CVE-2007-4126

Unspecified vulnerability in the dynamic tracing framework DTrace on Sun Solaris 10 before 20070730 allows local users with PRIVDTRACEUSER privileges to cause a denial of service panic or hang via unspecified use of certain DTrace programs...

CVE-2007-4126

CVE-2007-4126 affects Sun Solaris 10 prior to 20070730, where local users with PRIV_DTRACE_USER privileges can trigger a denial of service (panic or hang) via certain DTrace programs. Affected product is Solaris 10; underlying issue is unspecified use of DTrace programs. Remediation per connected...

CVE-2007-4126

Unspecified vulnerability in the dynamic tracing framework DTrace on Sun Solaris 10 before 20070730 allows local users with PRIVDTRACEUSER privileges to cause a denial of service panic or hang via unspecified use of certain DTrace programs...