Solaris 10 (x86) : 125359-25 (deprecated)

NSSNSPRJSS 3.30.2 Solarisx86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.. Date this patch was last updated by Sun : Nov/11/17 This plugin has been deprecated and either replaced with individual 125359 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 10 (sparc) : 125358-25 (deprecated)

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 125358 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...

Solaris 9 (x86) : 125359-25

NSSNSPRJSS 3.30.2 Solarisx86: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.. Date this patch was last updated by Sun : Nov/11/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 125358-25

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 125358-25

NSSNSPRJSS 3.30.2 Solaris: NSPR 4.15 / NSS 3.30.2 / JSS 4.3.2 Ma. Date this patch was last updated by Sun : Nov/09/17 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Fedora Core 5 : nspr-4.6.5-0.5.0.fc5 / nss-3.11.5-0.5.0.fc5 (2007-278)

This update fixes two security vulnerabilities with SSL 2 CVE-2007-0008, CVE-2007-0009. All users of NSS, which includes users of Firefox, Thunderbird, SeaMonkey, and other mozilla.org products, are recommended to update to this package. Note that Tenable Network Security has extracted the...

Fedora Core 6 : nspr-4.6.5-0.6.0.fc6 / nss-3.11.5-0.6.0.fc6 (2007-279)

This update fixes two security vulnerabilities with SSL 2 CVE-2007-0008, CVE-2007-0009. All users of NSS, which includes users of Firefox, Thunderbird, SeaMonkey, and other mozilla.org products, are recommended to update to this package. Note that Tenable Network Security has extracted the...

[SECURITY] Fedora Core 6 Update: nspr-4.6.5-0.6.0.fc6

NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management malloc and free and shared library linking...

[SECURITY] Fedora Core 5 Update: nspr-4.6.5-0.5.0.fc5

NSPR provides platform independence for non-GUI operating system facilities. These facilities include threads, thread synchronization, normal file and network I/O, interval timing and calendar time, basic memory management malloc and free and shared library linking...

devhelp, seamonkey security update

CentOS Errata and Security Advisory CESA-2006:0759 Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open sour...

Solaris 9 (sparc) : 117724-10

SunOS 5.9: NSPR 4.5.1 / NSS 3.9.5 / JSS 4.. Date this patch was last updated by Sun : Feb/03/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 114045-14

Security 3.3.4.8: NSPR 4.1.6 / NSS 3.3.4.8. Date this patch was last updated by Sun : Nov/08/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 117722-10

SunOS 5.8: NSPR 4.5.1 / NSS 3.9.5 / JSS 4.. Date this patch was last updated by Sun : Feb/03/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 libnspr LD_PRELOAD Arbitrary File Creation Local Root Exploit

No description provided by source. !/bin/sh $Id: raptorlibnspr2,v 1.4 2006/10/16 11:50:48 raptor Exp $ raptorlibnspr2 - Solaris 10 libnspr LDPRELOAD exploit Copyright c 2006 Marco Ivaldi [email protected] Local exploitation of a design error vulnerability in version 4.6.1 of NSPR, as include...

Solaris 10 libnspr constructor Local Root Exploit

No description provided by source. !/bin/sh $Id: raptorlibnspr3,v 1.1 2006/10/24 15:54:57 raptor Exp $ raptorlibnspr3 - Solaris 10 libnspr constructor exploit Copyright c 2006 Marco Ivaldi [email protected] Local exploitation of a design error vulnerability in version 4.6.1 of NSPR, as...

Sun Solaris NSPR library privilege escalation

Environment variable is used for log filename...

[Full-disclosure] iDefense Security Advisory 10.11.06: Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability

Sun Microsystems Solaris NSPR Library Arbitrary File Creation Vulnerability iDefense Security Advisory 10.11.06 http://www.idefense.com/intelligence/vulnerabilities/ Oct 11, 2006 I. BACKGROUND The Netscape Portable Runtime NSPR API allows compliant applications to use system facilities such as...

CVE-2006-4842: Improper Input Validation

The Netscape Portable Runtime NSPR API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files...

CVE-2006-4842

CVE-2006-4842 is documented as a local privilege-escalation in Netscape Portable Runtime (libnspr) where LIBNSPR prior to 4.6.3 allows the user to influence the log file via the NSPR_LOG_FILE environment variable. Evidence in connected docs shows Solaris-specific context: unpatched Solaris system...

devhelp, mozilla security update

CentOS Errata and Security Advisory CESA-2006:0329 Updated mozilla packages that fix several security bugs are now available. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the...