CVE-2010-4435

CVE-2010-4435 concerns a memory corruption/remote code execution vulnerability in the CMSD (Calendar Manager Service Daemon) RPC service used by calendar managers on multiple vendors. Connected documents confirm that the flaw exists in the CMSD handling of RPC requests (notably large XDR-encoded ...

CVE-2010-4442

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel...

CVE-2010-4443

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libc...

CVE-2010-4457

Technical details for CVE-2010-4457 are not publicly available in the provided documents. The entries only note an unspecified Solaris 11 Express vulnerability related to SMB/CIFS. Monitor for updated advisories or vendor advisories for specifics and fixes.

CVE-2010-4443

The CVE-2010-4443 entry relates to an unspecified local vulnerability in Oracle Solaris 10 and 11 Express, related to Kernel/NFS, affecting availability. Affected component: Solaris kernel/NFS path. Root cause details are not provided in the documents. Exploitation status and concrete mitigations...

CVE-2010-4458

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS...

CVE-2010-4460

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon...

CVE-2010-4433

CVE-2010-4433 affects Oracle Solaris 10, with a vulnerability in the Ethernet/Driver sub-component that could allow remote attackers to compromise confidentiality. The impact is partial confidentiality compromise via network access; details on the exact vectors, root cause, or exploitable conditi...

CVE-2010-4446

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 9 allows local users to affect confidentiality and integrity via unknown vectors related to XScreenSaver...

CVE-2010-4457

Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS...

CVE-2010-2632

Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the...

CVE-2010-3586

Technical details about CVE-2010-3586 are not provided in the supplied documents. Public information here is limited to a vague description of an unspecified Solaris 9 vulnerability related to XScreenSaver. Monitor for updates and new advisories.

CVE-2010-2632

CVE-2010-2632 maps to a glibc glob implementation issue in the GNU C Library where crafted glob expressions can consume CPU/memory and cause a denial of service; the IBM page notes a related glibc glob DoS via STAT commands to an FTP daemon, clarifying the root cause as the libc glob implementati...

CVE-2010-4415

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libc...

CVE-2010-3586

Unspecified vulnerability in Oracle Solaris 9 allows local users to affect confidentiality and integrity via unknown vectors related to XScreenSaver...

CVE-2010-4458: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS...

PT-2011-1564

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 10 Description The issue affects confidentiality and integrity, and it is related to the Fault Manager Daemon. The exact vectors of the issue are not specified. Recommendations For Oracle Solaris version 10, at the momen...

PT-2011-1537

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 10 Description The issue affects confidentiality and is related to Ethernet and the Driver sub-component in Oracle Solaris. The exact vectors of the issue are unknown. Recommendations For Oracle Solaris version 10, at th...