xscreensaver 5.01 - Arbitrary File Disclosure Symlink

xscreensaver 5.01 - Arbitrary File Disclosure Symlink xscreensaver local arbitrary file disclosure | symlink attack The �xscreensaver� program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on...

CVE-2009-2387: Undefined Security Weakness

Unspecified vulnerability in the proc filesystem in Sun OpenSolaris snv49 through snv109 allows local users to cause a denial of service deadlock and panic via unknown vectors, related to the ldtrewritesyscall function...

xscreensaver Symlink Attack

xscreensaver local arbitrary file disclosure | symlink attack The ´xscreensaver´ program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver program...

Re: [Full-disclosure] Oops! About xscreensaver 5.01

Hmmm, sorry for flooding the list but it seems it doesnt even affect xscreensaver 5.01. I will investigate when the vuln when I have time and keep you informed. There has to be some strange conf on my Opensolaris : Best Regards, kcope 2009/7/6 Kingcope [email protected]: Hello list, Just to...

xscreensaver local arbitrary file disclosure | symlink attack

xscreensaver local arbitrary file disclosure | symlink attack The "xscreensaver" program distributed normally with Xorg can be abused to disclose local files owned by other users also of the root account. Xscreensaver has the setuid bit on by default Example: Opensolaris The xscreensaver program...

CVE-2009-2296

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors...

CVE-2009-2297

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...

Code injection

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors...

CVE-2009-2296

CVE-2009-2296 affects Sun Solaris 10 and OpenSolaris prior to snv_119 where the NFSv4 server kernel module mishandles the nfs_portmon setting. This allows remote attackers to access shares and read, create, and modify arbitrary files via unspecified vectors. Remediation is through Solaris patches...

CVE-2009-2297

The CVE-2009-2297 entry concerns an unspecified vulnerability in the UDP subsystem of the Solaris/OpenSolaris kernel when Trusted Extensions is enabled. The issue is triggered by a regression in earlier kernel patches that affects the crgetlabel path, leading to a remote denial-of-service (panic)...

CVE-2009-2296

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors...

CVE-2009-2296: Undefined Security Weakness

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors...

CVE-2009-2297: Undefined Security Weakness

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...

Authorization

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...

CVE-2009-2282

The CVE-2009-2282 issue affects Sun Solaris 10 on SPARC and OpenSolaris snv_41–snv_108, where the Virtual Network Terminal Server daemon (vntsd) does not validate authorization for guest console access. This allows local control-domain users to obtain guest-domain privileges via unspecified vecto...

CVE-2009-2282

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...

CVE-2009-2282: Missing Authorization

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...

Sun Solaris 'auditconfig(1M)'命令本地特权提升漏洞

Bugraq ID: 35501 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的auditconfig存在错误，如果Solaris审核系统启用，并且用户有指派的RBAC可执行配置文件，可允许以高特权执行任意命令。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris build snv58 Sun OpenSolaris build snv57 Sun...

CVE-2009-2187

Multiple memory leaks in the 1 IP and 2 IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv67 through snv93, allow local users to cause a denial of service memory consumption via vectors related to the association of a DLENABMULTIREQ and b DLDISABMULTIREQ messages...

CVE-2009-2187

Multiple memory leaks in the 1 IP and 2 IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv67 through snv93, allow local users to cause a denial of service memory consumption via vectors related to the association of a DLENABMULTIREQ and b DLDISABMULTIREQ messages...