CVE-2011-0801: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect confidentiality and integrity via unknown vectors related to cp...

CVE-2011-0841: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to TCP/IP...

CVE-2011-0813: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2012-0098...

CVE-2011-0812: Undefined Security Weakness

Unspecified vulnerability in the Solaris component in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel...

CVE-2011-0820: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Kernel...

CVE-2011-0839: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect availability, related to LOFS...

CVE-2011-0412

Oracle Solaris 8, 9, and 10 stores back-out patch files undo.Z unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks...

Default credentials

Oracle Solaris 8, 9, and 10 stores back-out patch files undo.Z unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks...

CVE-2011-0412

Oracle Solaris 8, 9, and 10 stores back-out patch files undo.Z unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks...

CVE-2011-0412

CVE-2011-0412 affects Oracle Solaris 8, 9, and 10. The vulnerability arises from back-out patch files (undo.Z) stored unencrypted with world-readable permissions under /var/sadm/pkg/, enabling local users to access password hashes and perform brute-force password guessing. Remediation details in ...

CVE-2011-0412: Undefined Security Weakness

Oracle Solaris 8, 9, and 10 stores back-out patch files undo.Z unencrypted with world-readable permissions under /var/sadm/pkg/, which allows local users to obtain password hashes and conduct brute force password guessing attacks...

Oracle Solaris 10回滚补丁文件密码哈希泄露漏洞

CVE ID: CVE-2011-0412 Solaris是Sun Microsystems研发的计算机操作系统。 Oracle Solaris 10回滚补丁文件undo.Z包含未授权用户可读的密码哈希，本地用户可通过此漏洞泄露敏感信息。 此安全漏洞源于某些软件包的/var/sadm/pkg/pkgname/save/patchid/以不安全方式存储了"undo.Z"回滚文件，可导致提取包含root和其他用户的密码哈希的文件。 Sun Solaris 10.0 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Solaris 10 (x86) : 145962-02

SunOS 5.10x86: fmd patch. Date this patch was last updated by Sun : Dec/16/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2010-4460

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon...

CVE-2010-4442

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel...

CVE-2010-4458

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS...

CVE-2010-4446

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand...

CVE-2010-4457

Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS...

CVE-2010-4459

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to SCTP and Kernel/sockfs...

CVE-2010-4435

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claim...