2285 matches found
CVE-2010-3516
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand...
CVE-2010-3508
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones...
CVE-2010-3503
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su...
CVE-2010-3507
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler...
Design/Logic Flaw
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade...
Code injection
Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver...
CVE-2010-3540: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to ZFS...
Oracle Solaris su NULL Pointer
From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su' when creating new environme...
CVE-2010-3576: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect integrity and availability, related to the SCSI enclosure services device driver...
CVE-2010-3542: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality, related to USB...
CVE-2010-3509
CVE-2010-3509 corresponds to a Solaris rpc.cmsd vulnerability diagnosed as an integer overflow in the rpc.cmsd service on Solaris 8/9/10. The issue allows a remote attacker to trigger a crash or execute arbitrary code with root privileges by sending a crafted RPC request, potentially leading to d...
CVE-2010-3503
Oracle Solaris 10/OpenSolaris local vulnerability CVE-2010-3503 resides in the su command: when inheriting environment variables, a malloc() may return NULL, and a subsequent strcpy() can dereference it, causing a crash (segmentation fault). Public sources (e.g., exploit/packetstorm references) d...