CVE-2009-3183

CVE-2009-3183 affects SunOS/Solaris environments where the heap-based buffer overflow occurs in the w (and whodo) component. Concrete details in connected docs show affected products/versions: Solaris 8 (sparc/x86) and Solaris 10 (sparc/x86) with OpenSolaris prior to snv_124; the issue enables lo...

CVE-2009-3183: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv124, allows local users to gain privileges via unspecified vectors...

CVE-2009-3164

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

Design/Logic Flaw

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

CVE-2009-3164

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

CVE-2009-3164

CVE-2009-3164 affects Sun Solaris 10 and OpenSolaris (SNV 01–82, 111–122) when using a Cassini GigaSwift Ethernet Adapter. It is a consequence of an incomplete fix for CVE-2009-2136 in the IPv6/TCP-IP stack, enabling remote attackers to trigger a denial of service (kernel panic) via jumbo frames....

CVE-2009-3164: Undefined Security Weakness

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

CVE-2009-3100

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 9 and 10, OpenSolaris snv109 through snv122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service system hang by locking the screen and then attempting to launch an...

Design/Logic Flaw

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 9 and 10, OpenSolaris snv109 through snv122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service system hang by locking the screen and then attempting to launch an...

CVE-2009-3101

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

Design/Logic Flaw

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3101

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3100

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 9 and 10, OpenSolaris snv109 through snv122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service system hang by locking the screen and then attempting to launch an...

CVE-2009-3100

CVE-2009-3100 affects xscreensaver (Gnome-XScreenSaver) on Solaris 9/10, OpenSolaris snv_109–snv_122, and X11 6.4.1 on Solaris 8. The vulnerability stems from improper handling of Accessibility support, enabling a local user to cause a denial of service (system hang) by locking the screen and the...

CVE-2009-3100

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 9 and 10, OpenSolaris snv109 through snv122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service system hang by locking the screen and then attempting to launch an...

CVE-2009-3101

The CVE-2009-3101 issue affects xscreensaver (Gnome-XScreenSaver) on Sun Solaris 10 and OpenSolaris (snv_109–snv_122). Root cause: a regression in certain patches related to Trusted Extensions handling, leading to denial of service via screen locking (CPU consumption and console hang). Impact is ...

CVE-2009-3101

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3101: Undefined Security Weakness

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3000

The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv41 through snv122, when Network Cache Accelerator NCA logging is enabled, allows remote attackers to cause a denial of service panic via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7chttplog...

CVE-2009-3000

CVE-2009-3000 affects Sun Solaris 10 and OpenSolaris (SNV_41 through SNV_122) where the sockfs kernel module, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to trigger a denial of service (panic) via unspecified web-server traffic that causes a NULL pointer deref...