2048 matches found
Default credentials
Oracle Solaris 8, 9, and 10 stores back-out patch files undo.Z unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks...
CVE-2011-0412
Oracle Solaris 8, 9, and 10 stores back-out patch files undo.Z unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks...
CVE-2011-0412
CVE-2011-0412 affects Oracle Solaris 8, 9, and 10. The vulnerability arises from back-out patch files (undo.Z) stored unencrypted with world-readable permissions under /var/sadm/pkg/, enabling local users to access password hashes and perform brute-force password guessing. Remediation details in ...
Oracle Solaris 10回滚补丁文件密码哈希泄露漏洞
CVE ID: CVE-2011-0412 Solaris是Sun Microsystems研发的计算机操作系统。 Oracle Solaris 10回滚补丁文件undo.Z包含未授权用户可读的密码哈希，本地用户可通过此漏洞泄露敏感信息。 此安全漏洞源于某些软件包的/var/sadm/pkg/pkgname/save/patchid/以不安全方式存储了"undo.Z"回滚文件，可导致提取包含root和其他用户的密码哈希的文件。 Sun Solaris 10.0 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
Solaris 10 (x86) : 145962-02
SunOS 5.10x86: fmd patch. Date this patch was last updated by Sun : Dec/16/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
CVE-2010-4460
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon...
CVE-2010-4458
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS...
CVE-2010-4442
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel...
CVE-2010-4435
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claim...
CVE-2010-4443
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS...
CVE-2010-4446
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand...
CVE-2010-4457
Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS...
CVE-2010-4459
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to SCTP and Kernel/sockfs...
CVE-2010-4433
Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via unknown vectors related to Ethernet and the Driver sub-component...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon...
Buffer overflow
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claim...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS...