CVE-2010-3507

CVE-2010-3507 is associated with Solaris Live Upgrade. The connected Oracle Sun Products entry lists CVE-2010-3507 under Solaris with the Live Upgrade component, showing local access required (Local), and impacts on Confidentiality, Integrity, and Availability (Partial/Complete). The vulnerabilit...

CVE-2010-3517

CVE-2010-3517 is described as an unspecified local vulnerability affecting Oracle Solaris 10 and OpenSolaris, related to the kernel on x86. The connected documents confirm the vulnerability is located in the Solaris kernel/X86 component and is locally exploitable with the goal of impacting availa...

CVE-2010-3509

CVE-2010-3509 corresponds to a Solaris rpc.cmsd vulnerability diagnosed as an integer overflow in the rpc.cmsd service on Solaris 8/9/10. The issue allows a remote attacker to trigger a crash or execute arbitrary code with root privileges by sending a crafted RPC request, potentially leading to d...

CVE-2010-3507

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade...

CVE-2010-3503

Oracle Solaris 10/OpenSolaris local vulnerability CVE-2010-3503 resides in the su command: when inheriting environment variables, a malloc() may return NULL, and a subsequent strcpy() can dereference it, causing a crash (segmentation fault). Public sources (e.g., exploit/packetstorm references) d...

CVE-2010-3516

CVE-2010-3516 pertains to Oracle Solaris/OpenSolaris uDAPL/InfiniBand. The vulnerability is local to the system (local user required) and can affect availability via InfiniBand-related vectors. Connected docs confirm a Solaris InfiniBand issue (uDAPL) with local access and no remote exploitation ...

CVE-2010-3517

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86...

CVE-2010-3516

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand...

CVE-2010-3508

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones...

CVE-2010-3513

Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers...

PT-2010-4871

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 10 Description The issue affects confidentiality and integrity, allowing local users to exploit it via unknown vectors related to Solaris Zones. Recommendations For Oracle Solaris version 10, at the moment, there is no...

PT-2010-4879

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 Description The issue affects availability and is related to Kernel/X86. Recommendations For Oracle Solaris version 10, at the moment, there is no information about a newer version that contains a fix for this issue...

PT-2010-4870

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 8 through 10 Description The issue affects confidentiality, integrity, and availability. It is related to Live Upgrade, but the specific vectors are unknown. Recommendations For Oracle Solaris versions 8 through 10, at...

PT-2010-4872

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 8 through 10 Description The issue affects confidentiality, integrity, and availability. It is related to the Scheduler component, but the specific vectors are unknown. Recommendations For Oracle Solaris versions 8...

PT-2010-4875

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 9 and 10 OpenSolaris affected versions not specified Description The issue affects the integrity and availability of the system, and it is related to Device Drivers. Local users can exploit this issue via unknown vector...

Oracle Solaris - su Crash

Oracle Solaris - su Crash From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su'...

PT-2010-4867

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 Description The issue affects confidentiality and integrity, allowing local users to exploit it via unknown vectors related to the su command. Recommendations For Oracle Solaris version 10, at the moment, there is no...

PT-2010-4877

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 9 and 10 OpenSolaris affected versions not specified Description The issue affects availability and is related to the Kernel/Disk Driver in the Solaris component. It allows local users to exploit the vulnerability via...

PT-2010-4878

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 Description The issue affects the availability of the system and is related to InfiniBand. It can be exploited by local users via unknown vectors. Recommendations For Oracle Solaris version 10, at the moment, there i...

CVE-2010-3508: Undefined Security Weakness

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones...