CVE-2009-1207

CVE-2009-1207 describes a race condition in Solaris dircmp that could allow local users to overwrite arbitrary files via a symlink-based temporary-file attack. Connected documents confirm Solaris 10 (x86) and Solaris 10 (sparc) patches addressing this issue: 141015-01 for x86 and 141014-01 for SP...

CVE-2009-1207: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv01 through snv111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files...

CVE-2009-1170

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

Code injection

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

CVE-2009-1170

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

CVE-2009-1170

The CVE-2009-1170 entry concerns Sun OpenSolaris SNV 100–101. A local user with non-global-zone privileges can cause arbitrary code execution in the global zone when a global-zone user runs mdb on a non-global-zone process. The available documents describe the vulnerable condition and impact but ...

CVE-2009-1170: Undefined Security Weakness

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

CVE-2009-0925

Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv47 through snv85, allows local users to cause a denial of service hang of UFS filesystem write via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6425723...

Code injection

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

Code injection

Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv47 through snv85, allows local users to cause a denial of service hang of UFS filesystem write via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6425723...

Code injection

Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv86 through snv91, when running in 32-bit mode on x86 systems, allows local users to cause a denial of service panic via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6679732...

CVE-2009-0923

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

Code injection

Unspecified vulnerability in Sun OpenSolaris snv39 through snv45, when running in 64-bit mode on x86 architectures, allows local users to cause a denial of service hang of UFS filesystem write via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6442712...

CVE-2009-0924

Unspecified vulnerability in Sun OpenSolaris snv39 through snv45, when running in 64-bit mode on x86 architectures, allows local users to cause a denial of service hang of UFS filesystem write via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6442712...

CVE-2009-0926

Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv86 through snv91, when running in 32-bit mode on x86 systems, allows local users to cause a denial of service panic via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6679732...

CVE-2009-0926

Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv86 through snv91, when running in 32-bit mode on x86 systems, allows local users to cause a denial of service panic via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6679732...

CVE-2009-0923

Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv01 through snv110 allows remote attackers to cause a denial of service loss of incremental propagation requests to slave KDC servers via unknown vectors related to the master Key Distribution Center KDC...

CVE-2009-0926

Sun OpenSolaris (OpenSolaris SNV 86–91) on x86 in 32‑bit mode contains an unspecified vulnerability in the UFS filesystem routines ufs_getpage() and ufs_putapage(), leading to local users potentially causing a system hang/panic. The issue is tied to CR 6679732 and affects 32‑bit UFS write paths; ...

CVE-2009-0923

The CVE-2009-0923 entry affects Solaris 10 and OpenSolaris (SNV builds 01–110) in Kerberos Incremental Propagation. It describes a remote DoS against slave KDC servers caused by issues in the master KDC, with unknown vectors. No remediation details are provided in the supplied documents; CVSSv2 b...

CVE-2009-0925

Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv47 through snv85, allows local users to cause a denial of service hang of UFS filesystem write via unknown vectors related to the 1 ufsgetpage and 2 ufsputapage routines, aka CR 6425723...