Design/Logic Flaw

The 1 sendfile and 2 sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv110, allow local users to cause a denial of service panic via vectors related to vnode function calls...

CVE-2009-2857

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service deadlock and system halt via vectors involving mmap and write operations on...

CVE-2009-2857

CVE-2009-2857 affects Sun Solaris 8–10 and OpenSolaris prior to snv_103. The kernel mishandles the interaction between the filesystem and virtual-memory subsystems, allowing local users to trigger a deadlock and system halt by performing mmap and write operations on the same file. Impact is a loc...

CVE-2009-2857

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service deadlock and system halt via vectors involving mmap and write operations on...

PT-2009-5215 · Sun · Sun Solaris +1

Name of the Vulnerable Software and Affected Versions: Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 103 Description: The issue arises from improper handling of interaction between the filesystem and virtual-memory implementations. This allows local users to cause a denial o...

Design/Logic Flaw

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different...

CVE-2009-2711

CVE-2009-2711 details an XScreenSaver vulnerability in Sun Solaris 9/10 and related X11 servers (Solaris 8/9/10, OpenSolaris) where popup windows can be read by a physically proximate attacker even when the screen is locked (different from CVE-2009-1276). Connected sources show Solaris patch upda...

CVE-2009-2652

Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv37 through snv120, allows remote attackers to cause a denial of service panic via vectors involving the parsing of labeled packets...

CVE-2009-2652

CVE-2009-2652 affects Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_37 through snv_120. The vulnerability arises from the parsing of labeled packets, allowing remote attackers to cause a denial of service (panic). The entry documents an in-scope impact (availability) but provid...

CVE-2009-2644

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv121, when extended file attributes are used, allows local users to cause a denial of service panic via vectors related to "pathnames for invalid fds."...

Race condition

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv121, when extended file attributes are used, allows local users to cause a denial of service panic via vectors related to "pathnames for invalid fds."...

CVE-2009-2644

CVE-2009-2644 describes a race condition in the Solaris auditing subsystem affecting Solaris 9/10 and OpenSolaris prior to snv_121, where using extended file attributes can trigger a Denial of Service (panic) via vectors related to pathnames for invalid fds. The root cause is a concurrency issue ...

CVE-2009-2488

Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv102 through snv119, allows local users to cause a denial of service client panic via vectors involving "file operations."...

Design/Logic Flaw

Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv102 through snv119, allows local users to cause a denial of service client panic via vectors involving "file operations."...

Design/Logic Flaw

Use-after-free vulnerability in the frpricmp function in the ipfilter aka IP Filter subsystem in Sun Solaris 10, and OpenSolaris snv45 through snv110, allows remote attackers to cause a denial of service panic via unspecified vectors...

Code injection

Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv120, allows remote attackers to cause a denial of service panic via unspecified packets...

CVE-2009-2488

CVE-2009-2488 affects the NFSv4 kernel module in Sun Solaris 10 and OpenSolaris (snv_102–snv_119). The vulnerability is described as unspecified but enables local denial of service (client panic) via “file operations.” Remediation as per connected data includes Solaris updates: patch 141733-04 fo...

CVE-2009-2486

CVE-2009-2486: Unspecified vulnerability in the SCTP implementation affects Sun Solaris 10 and OpenSolaris prior to snv_120, allowing remote denial of service (panic) via unspecified packets. Affected component is SCTP in these OS releases. Root cause details are not provided in the documents; no...

CVE-2009-2430

Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv01 through snv58, when Solaris Auditing is enabled, allows local users with an RBAC execution profile for auditconfig to gain privileges via unknown attack vectors...

CVE-2009-2430

CVE-2009-2430 affects Sun Solaris 8, 9, 10 and OpenSolaris snv_01–snv_58 when Solaris Auditing is enabled. The vulnerability, described as an unspecified local privilege escalation in auditconfig exploitable by RBAC-enabled users, uses unknown attack vectors. Connected sources reference Solaris a...