CVE-2009-3899

CVE-2009-3899: Memory leak in the Sockets Direct Protocol (SDP) driver affects Solaris 10 and OpenSolaris snv_57–snv_94, enabling remote attackers to trigger a denial of service via memory consumption. The connected documents do not specify a patch/workaround.

CVE-2009-3839

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

CVE-2009-3839

CVE-2009-3839 concerns an unspecified vulnerability in the Solaris Trusted Extensions Policy configuration on Sun Solaris 10 and OpenSolaris snv_37 through snv_125. The issue could allow remote attackers to execute arbitrary code by leveraging access to the X server. Affected products are Solaris...

Sun OpenSolaris未明本地安全漏洞

Bugraq ID: 36818 Sun OpenSolaris是一款sun公司开发的操作系统。 Sun OpenSolaris存在一个未明安全漏洞，远程攻击者可以利用漏洞可完全控制受影响系统。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv99 Sun OpenSolaris build snv98 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris build snv93 Sun OpenSolaris...

Sun OpenSolaris内核Panic远程拒绝服务漏洞

Bugraq ID: 36819 Sun OpenSolaris是一款sun公司开发的操作系统。 Sun OpenSolaris存在一个未明安全漏洞，远程攻击者可以利用漏洞使影响内核触发panic，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun OpenSolaris 2009.6 目前没有解决方案提供： http://www.sun.com/...

Code injection

Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv100 through snv117, allows local users to bypass intended limitations of the filechownself privilege via certain uses of the chown system call...

CVE-2009-3706

CVE-2009-3706 affects the ZFS filesystem in Sun Solaris 10 and OpenSolaris snv_100–snv_117. A local attacker can bypass the file_chown_self privilege via certain uses of the chown system call, effectively bypassing intended limitations. The description does not specify concrete affected component...

Design/Logic Flaw

Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv109, allow local users to cause a denial of service memory consumption via vectors related to 1 MDATA, 2 MPROTO, 3 MPCPROTO, and 4 MSIG STREAMS messages...

CVE-2009-3519

Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv109, allow local users to cause a denial of service memory consumption via vectors related to 1 MDATA, 2 MPROTO, 3 MPCPROTO, and 4 MSIG STREAMS messages...

CVE-2009-3519

CVE-2009-3519 affects the kernel IP module in Sun Solaris 8–10 and OpenSolaris up to snv_109. The issue is multiple memory leaks in STREAMS handling (vectors M_DATA, M_PROTO, M_PCPROTO, M_SIG) that allow local users to cause a denial of service via memory consumption. The description does not spe...

CVE-2009-3432

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

CVE-2009-3432

CVE-2009-3432 affects Sun Solaris 10 and OpenSolaris (pre-sn v112) when using Xorg/Xnewt with RandR enabled. A vulnerability in xscreensaver could allow physically proximate attackers to read a locked screen via XRandR resize events. Affected patches are SunXScreensaver patches: Solaris 10 patche...

CVE-2009-3432

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

Code injection

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

CVE-2009-3390

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

CVE-2009-3390

Affected software: Sun Solaris 10 and OpenSolaris (snv_28 through snv_109). Vulnerable components: iscsiadm and iscsitadm utilities, with root cause related to the libima library. Impact: local users with certain RBAC execution profiles can gain privileges via unspecified vectors. Context: exploi...

CVE-2009-3390

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

Heap overflow

Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv124, allows local users to gain privileges via unspecified vectors...

CVE-2009-3183

CVE-2009-3183 affects SunOS/Solaris environments where the heap-based buffer overflow occurs in the w (and whodo) component. Concrete details in connected docs show affected products/versions: Solaris 8 (sparc/x86) and Solaris 10 (sparc/x86) with OpenSolaris prior to snv_124; the issue enables lo...

CVE-2009-3164

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...