CVE-2008-3838

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

Denial of service

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

CVE-2008-3838

CVE-2008-3838 affects Sun Solaris 10 and OpenSolaris prior to snv_88. The vulnerability resides in the NFS RPC zones implementation, enabling local administrators of non-global zones to read/modify NFS traffic across arbitrary non-global zones, potentially enabling file modifications or a denial ...

CVE-2008-3839

CVE-2008-3839 affects Sun Solaris 10 and OpenSolaris (snv_59 through snv_87) when the system is configured as an NFS server without the nodevices option. The issue is in the kernel NFS module and enables local users to cause a denial of service (panic) via unspecified vectors. Connected sources p...

CVE-2008-3839: Undefined Security Weakness

Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv59 through snv87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service panic via unspecified vectors...

Sun Solaris NFS RPC本地拒绝服务漏洞

BUGTRAQ ID:30853 CNCAN ID：CNCAN-2008082707 Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFS远程过程调用域实现存在安全问题，本地拥有管理员权限的攻击者可以利用漏洞在非全局域中截获或破坏到其他非全局域的通信。 可对受此漏洞影响的非全局域的NFS服务进行拒绝服务攻击。目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10sparc Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv87 Sun OpenSolar...

CVE-2008-3838: Improper Input Validation

Unspecified vulnerability in the NFS Remote Procedure Calls RPC zones implementation in Sun Solaris 10 and OpenSolaris before snv88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of...

Sun Solaris 'sendfilev()' Local Denial of Service Vulnerability

Solaris 'sendfilev' 系统调用造成了本地拒绝服务漏洞。 攻击者可以利用这个问题引发系统挂起，导致在一个拒绝服务。 这个问题影响的Solaris 10和OpenSolaris之前的版本 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun OpenSolaris build snv91 Sun OpenSolaris build snv90 Sun OpenSolaris build snv89 Sun OpenSolaris build...

Sun Solaris Platform Information and Control Library picld(1M) Local Denial of S

The Sun Solaris Platform Information and Control Library daemon 'picld1M' is prone to a local denial-of-service vulnerability. A local unprivileged attacker can exploit this issue to disable system monitoring and prevent proper operations of certain system utilities, resulting in a...

Sun Solaris 'snoop(1M)' Utility Multiple Remote Vulnerabilities

The Solaris 'snoop1M' network utility is prone to multiple remote vulnerabilities, including: - Multiple stack-based buffer-overflow vulnerabilities - Multiple format-string vulnerabilities Exploiting these issues will allow attackers to execute arbitrary code with the privileges of the 'nobody'...

CVE-2008-3666

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv96 allows 1 context-dependent attackers to cause a denial of service panic via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server wi...

CVE-2008-3666

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv96 allows 1 context-dependent attackers to cause a denial of service panic via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server wi...

CVE-2008-3666: Undefined Security Weakness

Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv96 allows 1 context-dependent attackers to cause a denial of service panic via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server wi...

Sun Solaris可信扩展标记网络安全绕过漏洞

BUGTRAQ ID: 30602 CNCAN ID：CNCAN-2008081102 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在安全绕过问题，远程攻击者可以利用漏洞获得对管理域的访问，可能导致特权提升。 如果一个Solaris可信扩展系统有一个标记域在"installed"状态，Solaris可信扩展标记网络存在安全问题允许从其他系统在相同标签远程未授权获得对受此漏洞影响息沟通的全局域访问。如果用户在全局域中有合法用户名和密码，这是强制访问控制MAC策略冲突。全局域域在可信扩展系统中属于管理域，只能管理员角色才能访问。 Sun Solaris 10x8...

Format string

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

CVE-2008-0964

The CVE-2008-0964 issue affects SunOS/Solaris snoop for several Solaris releases. The root cause is a stack-based buffer overflow in snoop when handling SMB traffic with the -o option omitted, enabling remote code execution. Concrete fixes are available via Solaris patch updates: 108964-11 (Solar...

CVE-2008-0965

CVE-2008-0965 describes multiple format-string vulnerabilities in Solaris snoop in SunOS/Solaris 8–10 (OpenSolaris before snv_96). The connected Nessus/OpenVAS data identify affected components as snoop in SunOS/Solaris and reference specific patches: 138083-01 (Solaris 10 SPARC) and 138084-01 (S...

CVE-2008-0965

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...

CVE-2008-0964: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet...

CVE-2008-0965: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet...