CVE-2008-5699

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2008-5699: Undefined Security Weakness

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2008-5689

tun in IP Tunnel in Solaris 10 and OpenSolaris snv01 through snv76 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference...

Session fixation

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

Null pointer dereference

tun in IP Tunnel in Solaris 10 and OpenSolaris snv01 through snv76 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference...

Design/Logic Flaw

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5689

CVE-2008-5689 affects Solaris 10/OpenSolaris (SNV 01–SNV 76) via the tun/tunnel SIOCGTUNPARAM IOCTL. The underlying issue is a NULL pointer dereference triggered by a crafted IOCTL, allowing local users to cause a denial of service (panic) and potentially execute arbitrary code. Affected componen...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

[TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference Advisory ID: TKADV2008-015 Revision: 1.0 Release Date: 2008/12/17 Last Modified: 2008/12/17 Date Reported: 2007/09/04 Author: Tobias Klein tk at trapkit.de Affected Software:...

CVE-2008-5690: Undefined Security Weakness

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5689: Undefined Security Weakness

tun in IP Tunnel in Solaris 10 and OpenSolaris snv01 through snv76 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference...

CVE-2008-5661

The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...

Null pointer dereference

The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...

CVE-2008-5661

The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...

CVE-2008-5661

The CVE-2008-5661 issue affects Sun Solaris 10 and OpenSolaris (snv_47 through snv_82) where the IPv4 Forwarding feature can trigger a NULL pointer dereference via remote input, causing a denial of service (panic). The vulnerability is reported with patches installed on affected builds; the exact...

CVE-2008-5661: Undefined Security Weakness

The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

Design/Logic Flaw

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv96, when running on a DNS server with Network Address Translation NAT configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended...

CVE-2008-5133

The connected CVE-2008-5133 entry describes Solaris SunOS/OpenSolaris ipnat/IPFilter behavior: on NAT-enabled DNS servers, it improperly alters the source port of a packet when the destination port is DNS, allowing remote attackers to spoof DNS responses and bypass the CVE-2008-1447 protection me...