CVE-2010-2394

CVE-2010-2394 affects Oracle Solaris 10. The connected Oracle CPU July 2010 advisory lists Solaris as impacted by a TCP/IP–related vulnerability that allows local users to affect availability. The CVSS base score is 4.7 (MEDIUM) with local attack vector and availability impact. The provided docum...

CVE-2010-2400

CVE-2010-2400 is reported as an unspecified local vulnerability in Oracle Solaris 9/10 and OpenSolaris, affecting Kernel/Filesystem and hindering availability. The CVE entry is supported by Oracle’s July 2010 Critical Patch Update documentation, which lists Solaris kernel/Filesystem fixes among 5...

CVE-2010-2382

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors...

CVE-2010-2383

CVE-2010-2383 (Solaris/OpenSolaris NFS): Unspecified vulnerability in Solaris 8/9/10/OpenSolaris related to NFS that allows a local unprivileged user to affect confidentiality and integrity by abusing unsafe use of temporary files in nfslogd. The public disclosure shows an unprivileged user can c...

CVE-2010-2393

CVE-2010-2393 affects Oracle Solaris 10 and OpenSolaris. The connected Solaris entry identifies a local vulnerability tied to the kernel RPC subsystem that can impact availability. The advisory notes a local-exploit scenario (no remote access) and a high impact on availability, with no explicit e...

CVE-2010-2399

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/VM...

CVE-2010-2382

CVE-2010-2382 (Solaris) affects Solaris 8/9/10 where the flar tool used for creating flash archives writes to insecure temporary files in /tmp with predictable names (e.g., .flash_filter_one_.$PID). An unprivileged user can pre-create symlinks to privileged targets, and when root runs flar, it ma...

CVE-2010-2386

Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver...

Oracle Solaris - 'rdist' Privilege Escalation

source: https://www.securityfocus.com/bid/41612/info Oracle Solaris is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of...

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to overwrite arbitrary files. This may result in denial-of-service conditions o...

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to...

Oracle Solaris - rdist Privilege Escalation

Oracle Solaris - rdist Privilege Escalation source: https://www.securityfocus.com/bid/41612/info Oracle Solaris is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue wi...

Oracle Solaris - nfslogd Insecure Temporary File Creation

Oracle Solaris - nfslogd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41637/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected...

Oracle Solaris - 'nfslogd' Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41637/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service...

Oracle Solaris 8910 - flar Insecure Temporary File Creation

Oracle Solaris 8910 - flar Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41619/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected...

Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41619/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service...

Solaris 10 (sparc) : 125388-03

SunOS 5.10: SNIA Multipath Management API. Date this patch was last updated by Sun : May/21/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2010-1183

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...

Design/Logic Flaw

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...

CVE-2010-1183

The CVE-2010-1183 issue affects Oracle Solaris patch installation scripts used by Update Manager. A symlink vulnerability in a /tmp/CLEANUP file allows a local user to append data to arbitrary files, enabling local privilege escalation on x86 Solaris during patch updates. The Packet Storm entry d...