CVE-2008-5908: Undefined Security Weakness

Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653455...

CVE-2008-5909: Undefined Security Weakness

Unspecified vulnerability in convlpd in Sun OpenSolaris has unknown impact and local attack vectors, related to improper handling of temporary files, aka Bug ID 6655641...

CVE-2009-0168: Undefined Security Weakness

Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to a failure to "include all cache files," and improper handling of temporary files...

Integer overflow

Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service panic via a large integer value in the second argument aka nent argument...

CVE-2009-0131

The UFS implementation in the kernel in Sun OpenSolaris snv29 through snv90 allows local users to cause a denial of service panic via the single posixfallocate test in the SUSv3 POSIX test suite, related to an FALLOCSP fcntl call...

CVE-2009-0132

Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service panic via a large integer value in the second argument aka nent argument...

CVE-2009-0131

The UFS implementation in the kernel in Sun OpenSolaris snv29 through snv90 allows local users to cause a denial of service panic via the single posixfallocate test in the SUSv3 POSIX test suite, related to an FALLOCSP fcntl call...

CVE-2009-0131

The CVE-2009-0131 entry describes a local-denial-of-service vulnerability in the Sun OpenSolaris kernel: the UFS implementation (snv_29 to snv_90) can panic under the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call. Documents do not provide exploitati...

CVE-2009-0132

CVE-2009-0132 describes an integer overflow in the aio_suspend function in Sun Solaris 8–10 and OpenSolaris when 32‑bit mode is enabled, enabling local denial of service (panic). The issue affects Solaris 9/10 variants (sparc/x86) and OpenSolaris. Concrete details from connected documents show pa...

CVE-2009-0132: Undefined Security Weakness

Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service panic via a large integer value in the second argument aka nent argument...

Sun Solaris 'lpadmin'和'ppdmgr'本地拒绝服务漏洞

BUGTRAQ ID: 33269 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的lpadmin1M和ppdmgr1M存在安全，在特定情况下，允许本地攻击者使系统部分服务或者整个系统触发panic，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun OpenSolaris build snv91 Sun...

Sun OpenSolaris 'posix_fallocate(3C)'系统调用本地拒绝服务漏洞

BUGTRAQ ID: 33267 Sun OpenSolaris是一款开放源代码的操作系统。 Sun OpenSolaris包含的posixfallocate3C系统调用存在安全问题，允许本地攻击者使系统触发panic，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv90 Sun OpenSolaris build snv89 Sun OpenSolaris build snv88 Sun OpenSolaris build snv87 Sun OpenSolaris build snv85 Sun OpenSolaris build...

CVE-2009-0131: Undefined Security Weakness

The UFS implementation in the kernel in Sun OpenSolaris snv29 through snv90 allows local users to cause a denial of service panic via the single posixfallocate test in the SUSv3 POSIX test suite, related to an FALLOCSP fcntl call...

[TKADV2009-001] Sun Solaris aio_suspend() Kernel Integer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Sun Solaris aiosuspend Kernel Integer Overflow Vulnerability Advisory ID: TKADV2009-001 Revision: 1.0 Release Date: 2009/01/08 Last Modified: 2009/01/08 Date Reported: 2008/09/15 Author: Tobias Klein tk at trapkit.de Affected Software: Solar...

Sun Solaris rpc.metad远程拒绝服务漏洞

BUGTRAQ ID: 28261 CVECAN ID: CVE-2008-1480 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 如果远程攻击者向Solaris提交了恶意RPC请求的话，就会导致rpc.metad1M崩溃，服务和Solaris卷标管理器（SVM）命令会失效，这是一种拒绝服务。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 - snv95 Sun Solstice Disk Suite 4.2.1 厂商补丁：...

CVE-2009-0069

CVE-2009-0069 affects the NFSv4 client in Sun Solaris 10 and OpenSolaris (pre-snV_102) where the kernel’s nfs4rename_persistent_fh function can be abused by local users to trigger a denial of service (recursive mutex_enter and panic). The issue is fixed by Sun patch 139466-04 (SPARC) and 139467-0...

CVE-2009-0069: Undefined Security Weakness

Unspecified vulnerability in the nfs4renamepersistentfh function in the NFS 4 aka NFSv4 client in the kernel in Sun Solaris 10 and OpenSolaris before snv102 allows local users to cause a denial of service recursive mutexenter and panic via unspecified vectors...

Solaris/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (61 bytes)

Solaris/x86 - setuid0 + /bin/cat /etc/shadow Shellcode 61 bytes. Shellcode exploit for Solarisx86 platform. Tags: Metasploit Framework MSF Name = John Babio Twitter = 3vi1john SunOS opensolaris 10 5.11 i86pc i386 i86pc setuid0 /bin/cat //etc/shadow char code=...

Design/Logic Flaw

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2008-5699

CVE-2008-5699 affects Sun Solaris 10 and OpenSolaris (snv_50 through snv_104). The name service cache daemon (nscd) does not properly check permissions, allowing local users to gain privileges and access sensitive information via unspecified vectors. Connected sources corroborate Solaris patches ...