CVE-2008-3839

CVE-2008-3839 affects Sun Solaris 10 and OpenSolaris (snv_59 through snv_87) when the system is configured as an NFS server without the nodevices option. The issue is in the kernel NFS module and enables local users to cause a denial of service (panic) via unspecified vectors. Connected sources p...

Sun Solaris NFS RPC本地拒绝服务漏洞

BUGTRAQ ID:30853 CNCAN ID：CNCAN-2008082707 Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFS远程过程调用域实现存在安全问题，本地拥有管理员权限的攻击者可以利用漏洞在非全局域中截获或破坏到其他非全局域的通信。 可对受此漏洞影响的非全局域的NFS服务进行拒绝服务攻击。目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10sparc Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv87 Sun OpenSolar...

Sun Solaris 'sendfilev()' Local Denial of Service Vulnerability

Solaris 'sendfilev' 系统调用造成了本地拒绝服务漏洞。 攻击者可以利用这个问题引发系统挂起，导致在一个拒绝服务。 这个问题影响的Solaris 10和OpenSolaris之前的版本 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun OpenSolaris build snv91 Sun OpenSolaris build snv90 Sun OpenSolaris build snv89 Sun OpenSolaris build...

Sun Solaris Platform Information and Control Library picld(1M) Local Denial of S

The Sun Solaris Platform Information and Control Library daemon 'picld1M' is prone to a local denial-of-service vulnerability. A local unprivileged attacker can exploit this issue to disable system monitoring and prevent proper operations of certain system utilities, resulting in a...

Sun Solaris 'snoop(1M)' Utility Multiple Remote Vulnerabilities

The Solaris 'snoop1M' network utility is prone to multiple remote vulnerabilities, including: - Multiple stack-based buffer-overflow vulnerabilities - Multiple format-string vulnerabilities Exploiting these issues will allow attackers to execute arbitrary code with the privileges of the 'nobody'...

CVE-2008-3666

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv96 allows 1 context-dependent attackers to cause a denial of service panic via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server wi...

CVE-2008-3666

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv96 allows 1 context-dependent attackers to cause a denial of service panic via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server wi...

Sun Solaris可信扩展标记网络安全绕过漏洞

BUGTRAQ ID: 30602 CNCAN ID：CNCAN-2008081102 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在安全绕过问题，远程攻击者可以利用漏洞获得对管理域的访问，可能导致特权提升。 如果一个Solaris可信扩展系统有一个标记域在"installed"状态，Solaris可信扩展标记网络存在安全问题允许从其他系统在相同标签远程未授权获得对受此漏洞影响息沟通的全局域访问。如果用户在全局域中有合法用户名和密码，这是强制访问控制MAC策略冲突。全局域域在可信扩展系统中属于管理域，只能管理员角色才能访问。 Sun Solaris 10x8...

Format string

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

CVE-2008-0964

The CVE-2008-0964 issue affects SunOS/Solaris snoop for several Solaris releases. The root cause is a stack-based buffer overflow in snoop when handling SMB traffic with the -o option omitted, enabling remote code execution. Concrete fixes are available via Solaris patch updates: 108964-11 (Solar...

CVE-2008-0965

CVE-2008-0965 describes multiple format-string vulnerabilities in Solaris snoop in SunOS/Solaris 8–10 (OpenSolaris before snv_96). The connected Nessus/OpenVAS data identify affected components as snoop in SunOS/Solaris and reference specific patches: 138083-01 (Solaris 10 SPARC) and 138084-01 (S...

CVE-2008-0965

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

CVE-2008-3549

Unspecified vulnerability in the pthreadmutexreltimedlocknp API in Sun Solaris 10 and OpenSolaris before snv90 allows local users to cause a denial of service system hang or panic via unknown vectors...

CVE-2008-3549

The CVE-2008-3549 issue affects Sun Solaris 10 and OpenSolaris prior to snv_90, due to an unspecified problem in the pthread_mutex_reltimedlock_np API that can cause a local denial of service (system hang/panic). Impact is local; no exploit details are provided in the documents. Remediation is no...

CVE-2008-3549

Unspecified vulnerability in the pthreadmutexreltimedlocknp API in Sun Solaris 10 and OpenSolaris before snv90 allows local users to cause a denial of service system hang or panic via unknown vectors...

Sun Solaris 'snoop(1M)'工具远程命令执行漏洞

BUGTRAQ ID: 30556 CVE ID：CVE-2008-0964 CVE-2008-0965 CNCVE ID：CNCVE-20080964 CNCVE-20080965 Sun Solaris是一款商业性质的操作系统。 snoop1M网络工具相关的SMB通信显示存在安全问题，远程攻击者可以利用漏洞以'nobody'权限或其他本地用户权限执行任意命令。 目前没有详细漏洞细节提供。 如下平台受此漏洞影响： Solaris 10 Solaris 9 Solaris 8 OpenSolaris builds snv01 to snv95 Sun Solaris 9x86 Sun...

CVE-2008-3426

Unspecified vulnerability in the Solaris Platform Information and Control Library daemon picld in Sun Solaris 8 through 10, and OpenSolaris builds snv01 through snv95, allows local users to cause a denial of service via unknown vectors that prevent operation of utilities such as prtdiag, prtpicl,...

Code injection

Unspecified vulnerability in the Solaris Platform Information and Control Library daemon picld in Sun Solaris 8 through 10, and OpenSolaris builds snv01 through snv95, allows local users to cause a denial of service via unknown vectors that prevent operation of utilities such as prtdiag, prtpicl,...

Code injection

Unspecified vulnerability in the Sun 1 UltraSPARC T2 and 2 UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv93, allows local users to cause a denial of service panic via unspecified vectors, probably related to core files...

CVE-2008-2708

Unspecified vulnerability in the Sun 1 UltraSPARC T2 and 2 UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv93, allows local users to cause a denial of service panic via unspecified vectors, probably related to core files...