Design/Logic Flaw

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...

CVE-2009-0872

CVE-2009-0872 affects Sun Solaris 10 and OpenSolaris builds prior to snv_111, where the NFS server fails to properly enforce AUTH_NONE (sec=none) when used with other security modes. This allows remote attackers to bypass access controls and read/modify files by abusing a combination of AUTH_NONE...

CVE-2009-0873

The NFS daemon aka nfsd in Sun Solaris 10 and OpenSolaris before snv106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys a...

CVE-2009-0872

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...

CVE-2009-0873

CVE-2009-0873 affects Sun Solaris 10 and OpenSolaris before snv_106, where the NFS daemon (nfsd) under NFSv3 mishandles combinations of security modes, allowing remote attackers to bypass access controls and read or modify protected files by abusing incompatible sec=sys and sec=krb5 configuration...

Design/Logic Flaw

The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv111, allow local users to cause a denial of service infinite loop and system hang by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4opreaddir function...

CVE-2009-0870

CVE-2009-0870 affects Sun Solaris 10 (and OpenSolaris before snv_111) where the NFSv4 Server kernel module can cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem shared via NFSv4, due to the rfs4_op_readdir path. Affected platforms include Solaris 10 SPARC a...

CVE-2009-0838

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv88 through snv102, does not properly free memory, which allows local users to cause a denial of service panic via unspecified vectors, related to the vmemhashdelete function...

Design/Logic Flaw

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv88 through snv102, does not properly free memory, which allows local users to cause a denial of service panic via unspecified vectors, related to the vmemhashdelete function...

CVE-2009-0838

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv88 through snv102, does not properly free memory, which allows local users to cause a denial of service panic via unspecified vectors, related to the vmemhashdelete function...

CVE-2009-0838

The CVE-2009-0838 issue affects Sun Solaris 10 and OpenSolaris builds snv_88 through snv_102, where the crypto pseudo device driver fails to free memory. This can enable local attackers to trigger a denial-of-service (panic) via the vmem_hash_delete path. Public details in connected records confi...

CVE-2009-0480

The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service 32-bit application failure and login outage by opening a large number of sockets...

CVE-2009-0480

CVE-2009-0480 affects Sun Solaris 8–10 and older OpenSolaris builds (pre-sn v82). The IP implementation allocates minor socket numbers via an improper arena, enabling local users to trigger denial of service by opening many sockets (32-bit app failure and login outage). Affected: Solaris 8/9/10 (...

CVE-2009-0477

Unspecified vulnerability in the process aka proc filesystem in Sun OpenSolaris snv85 through snv100 allows local users to gain privileges via vectors related to the contract filesystem...

Code injection

Unspecified vulnerability in the process aka proc filesystem in Sun OpenSolaris snv85 through snv100 allows local users to gain privileges via vectors related to the contract filesystem...

CVE-2009-0477

Unspecified vulnerability in the process aka proc filesystem in Sun OpenSolaris snv85 through snv100 allows local users to gain privileges via vectors related to the contract filesystem...

CVE-2009-0477

Technical details for CVE-2009-0477 are not publicly available in the provided documents. Monitor for updates from official sources for affected versions, impact, and remediation.

Code injection

Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv37, when automountd is used, allows user-assisted remote attackers to cause a denial of service unresponsive NFS filesystems via unknown vectors...

CVE-2008-6024

CVE-2008-6024 concerns an unspecified vulnerability in the NFSv4 client module of the kernel on Sun Solaris 10 and OpenSolaris prior to snv_37, triggered when automountd is used. The issue allows user-assisted remote attackers to cause denial of service (unresponsive NFS filesystems) via unknown ...

CVE-2009-0346

CVE-2009-0346 affects the kernel IPsec/IP stacks on Solaris 9/10 and OpenSolaris (snv_01–snv_85). The vulnerability is triggered by processing a self-encapsulated IP-in-IP packet without IPsec protection, allowing local users to cause a denial of service (panic). The NVD entry rates this as CVSSv...