2285 matches found
Oracle Solaris - nfslogd Insecure Temporary File Creation
Oracle Solaris - nfslogd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41637/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected...
Oracle Solaris Management Console - WBEM Insecure Temporary File Creation
Oracle Solaris Management Console - WBEM Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to...
CVE-2010-2386: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver...
Oracle Solaris Management Console - WBEM Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to overwrite arbitrary files. This may result in denial-of-service conditions o...
Oracle Solaris - 'rdist' Privilege Escalation
source: https://www.securityfocus.com/bid/41612/info Oracle Solaris is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of...
CVE-2010-2384: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...
CVE-2010-2383: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS...
CVE-2010-2382: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors...
CVE-2010-2376: Undefined Security Weakness
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console...
Oracle Solaris - 'nfslogd' Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41637/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service...
Oracle Solaris 8910 - flar Insecure Temporary File Creation
Oracle Solaris 8910 - flar Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41619/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected...
Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation
source: https://www.securityfocus.com/bid/41619/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service...
Solaris 10 (sparc) : 125388-03
SunOS 5.10: SNIA Multipath Management API. Date this patch was last updated by Sun : May/21/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
CVE-2010-1183
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...
Design/Logic Flaw
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...
CVE-2010-1183
The CVE-2010-1183 issue affects Oracle Solaris patch installation scripts used by Update Manager. A symlink vulnerability in a /tmp/CLEANUP file allows a local user to append data to arbitrary files, enabling local privilege escalation on x86 Solaris during patch updates. The Packet Storm entry d...
CVE-2010-1183
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...
CVE-2010-1183: Improper Link Resolution Before File Access
Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...
[TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Oracle Solaris UCODEGETVERSION IOCTL Kernel NULL Pointer Dereference Advisory ID: TKADV2010-001 Revision: 1.0 Release Date: 2010/01/31 Last Modified: 2010/01/31 Date Reported: 2009/11/29 Author: Tobias Klein tk at trapkit.de Affected Softwar...