CVE-2009-2857

CVE-2009-2857 affects Sun Solaris 8–10 and OpenSolaris prior to snv_103. The kernel mishandles the interaction between the filesystem and virtual-memory subsystems, allowing local users to trigger a deadlock and system halt by performing mmap and write operations on the same file. Impact is a loc...

PT-2009-5215 · Sun · Sun Solaris +1

Name of the Vulnerable Software and Affected Versions: Sun Solaris versions 8 through 10 OpenSolaris versions prior to snv 103 Description: The issue arises from improper handling of interaction between the filesystem and virtual-memory implementations. This allows local users to cause a denial o...

CVE-2009-2857: Improper Locking

The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service deadlock and system halt via vectors involving mmap and write operations on...

Design/Logic Flaw

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different...

CVE-2009-2711

CVE-2009-2711 details an XScreenSaver vulnerability in Sun Solaris 9/10 and related X11 servers (Solaris 8/9/10, OpenSolaris) where popup windows can be read by a physically proximate attacker even when the screen is locked (different from CVE-2009-1276). Connected sources show Solaris patch upda...

CVE-2009-2711: Exposure of Sensitive Information to an Unauthorized Actor

XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different...

CVE-2009-2652

Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv37 through snv120, allows remote attackers to cause a denial of service panic via vectors involving the parsing of labeled packets...

CVE-2009-2652

CVE-2009-2652 affects Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv_37 through snv_120. The vulnerability arises from the parsing of labeled packets, allowing remote attackers to cause a denial of service (panic). The entry documents an in-scope impact (availability) but provid...

CVE-2009-2652: Undefined Security Weakness

Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv37 through snv120, allows remote attackers to cause a denial of service panic via vectors involving the parsing of labeled packets...

CVE-2009-2644

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv121, when extended file attributes are used, allows local users to cause a denial of service panic via vectors related to "pathnames for invalid fds."...

Race condition

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv121, when extended file attributes are used, allows local users to cause a denial of service panic via vectors related to "pathnames for invalid fds."...

CVE-2009-2644

CVE-2009-2644 describes a race condition in the Solaris auditing subsystem affecting Solaris 9/10 and OpenSolaris prior to snv_121, where using extended file attributes can trigger a Denial of Service (panic) via vectors related to pathnames for invalid fds. The root cause is a concurrency issue ...

CVE-2009-2644: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv121, when extended file attributes are used, allows local users to cause a denial of service panic via vectors related to "pathnames for invalid fds."...

Design/Logic Flaw

Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv102 through snv119, allows local users to cause a denial of service client panic via vectors involving "file operations."...

Design/Logic Flaw

Use-after-free vulnerability in the frpricmp function in the ipfilter aka IP Filter subsystem in Sun Solaris 10, and OpenSolaris snv45 through snv110, allows remote attackers to cause a denial of service panic via unspecified vectors...

Code injection

Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv120, allows remote attackers to cause a denial of service panic via unspecified packets...

CVE-2009-2488

Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv102 through snv119, allows local users to cause a denial of service client panic via vectors involving "file operations."...

CVE-2009-2486

CVE-2009-2486: Unspecified vulnerability in the SCTP implementation affects Sun Solaris 10 and OpenSolaris prior to snv_120, allowing remote denial of service (panic) via unspecified packets. Affected component is SCTP in these OS releases. Root cause details are not provided in the documents; no...

CVE-2009-2488

CVE-2009-2488 affects the NFSv4 kernel module in Sun Solaris 10 and OpenSolaris (snv_102–snv_119). The vulnerability is described as unspecified but enables local denial of service (client panic) via “file operations.” Remediation as per connected data includes Solaris updates: patch 141733-04 fo...

CVE-2009-2487: Undefined Security Weakness

Use-after-free vulnerability in the frpricmp function in the ipfilter aka IP Filter subsystem in Sun Solaris 10, and OpenSolaris snv45 through snv110, allows remote attackers to cause a denial of service panic via unspecified vectors...