Ubuntu 6.06 LTS / 8.04 LTS / 8.10 / 9.04 : linux, linux-source-2.6.15 vulnerabilities (USN-793-1)

Igor Zhbanov discovered that NFS clients were able to create device nodes even when rootsquash was enabled. An authenticated remote attacker could create device nodes with open permissions, leading to a loss of privacy or escalation of privileges. Only Ubuntu 8.10 and 9.04 were affected...

CVE-2009-2282

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...

Authorization

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...

CVE-2009-2282

The CVE-2009-2282 issue affects Sun Solaris 10 on SPARC and OpenSolaris snv_41–snv_108, where the Virtual Network Terminal Server daemon (vntsd) does not validate authorization for guest console access. This allows local control-domain users to obtain guest-domain privileges via unspecified vecto...

PT-2009-4714 · Sun · Sun Solaris 10 +1

Name of the Vulnerable Software and Affected Versions: Sun Solaris 10 OpenSolaris versions snv 41 through snv 108 Description: The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms on SPARC platforms does not check authorization for guest console access. This allows local...

Solaris 9 (sparc) : 141396-01

SunOS 5.9: usr/sbin/ntpq patch. Date this patch was last updated by Sun : Jun/29/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

System V Derived /bin/login Extraneous Arguments Buffer Overflow

This exploit connects to a system's modem over dialup and exploits a buffer overflow vulnerability in it's System V derived /bin/login. The vulnerability is triggered by providing a large number of arguments. This module requires Metasploit: https://metasploit.com/download Current source:...

Solaris 10 (sparc) : 138826-12 (deprecated)

SunOS 5.10: PostgreSQL 8.3 core patch. Date this patch was last updated by Sun : Mar/29/13 This plugin has been deprecated and either replaced with individual 138826 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Sun Solaris Ultra-SPARC T2加密提供设备驱动本地拒绝服务漏洞

Bugraq ID: 35438 Sun Solaris是一款商业性质的操作系统。 Solaris Ultra-SPARC T2加密提供设备驱动存在内存泄漏问题，本地或者远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris build snv...

CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver aka n2cp in Sun Solaris 10, and OpenSolaris snv54 through snv112, allows context-dependent attackers to cause a denial of service memory consumption via unspecified vectors related to a large keylen value...

CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver aka n2cp in Sun Solaris 10, and OpenSolaris snv54 through snv112, allows context-dependent attackers to cause a denial of service memory consumption via unspecified vectors related to a large keylen value...

Memory corruption

Memory leak in the Ultra-SPARC T2 crypto provider device driver aka n2cp in Sun Solaris 10, and OpenSolaris snv54 through snv112, allows context-dependent attackers to cause a denial of service memory consumption via unspecified vectors related to a large keylen value...

CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver aka n2cp in Sun Solaris 10, and OpenSolaris snv54 through snv112, allows context-dependent attackers to cause a denial of service memory consumption via unspecified vectors related to a large keylen value...

CVE-2009-2137

The CVE-2009-2137 issue is a memory leak in the Ultra-SPARC T2 crypto provider device driver (n2cp) on Sun Solaris 10 and OpenSolaris (snv_54–snv_112). The vulnerability allows context-dependent attackers to cause a denial of service through memory consumption triggered by very large keylen value...

Sun Solaris 'lp'客户端本地拒绝服务漏洞

Bugraq ID: 35400 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在一个未明错误，本地攻击者可以利用漏洞取消root的打印作业。 此安全问题发生于安装了补丁127127-11 SPARC或127128-11的Solaris 10。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun...

Mozilla Firefox 'NPObject'访问远程代码执行漏洞

Bugraq ID: 35360 CVE ID：CVE-2009-1837 CNCVE ID：CNCVE-20091837 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox访问NPObject JS封装类对象的私有数据时存在竞争条件错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当访问NPObject属性一个封装的JSObject时NPObjWrapperNewResolve存在竞争条件错误，在装载Java...

Sun OpenSolaris 'smbfs(7FS)'本地信息泄漏漏洞

Bugraq ID: 35306 CNCAN ID：CNCAN-2009061202 Sun OpenSolaris是一款unix操作系统。 Sun OpenSolaris 'smbfs7FS'使用默认挂接权限时存在信息泄漏问题，本地非特权攻击者可以利用漏洞未授权访问读取CIFS挂接卷上的文件内容和目录列表。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...

Sun GlassFish Enterprise Server HTTP Engine/Admin接口本地拒绝服务漏洞

Bugraq ID: 35217 CNCAN ID：CNCAN-2009060604 Sun GlassFish Enterprise Server是一款构建和部署下一代应用程序和服务的开源和开放社区平台。 Sun GlassFish Enterprise Server HTTP引擎和管理接口存在多个安全问题，远程和本地攻击者可以利用漏洞进行跨站脚本执行和拒绝服务等攻击。 -允许远程非特权用户在验证用户浏览器会话中执行JavaScript，导致泄漏敏感信息。 -允许本地特权用户消耗大量系统资源，造成拒绝服务攻击。 Sun Glassfish Enterprise Server 2.1...

Solaris 10 (sparc) : 140917-02

SunOS 5.10: rpc.nisd patch. Date this patch was last updated by Sun : Jul/22/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 141742-04

SunOS 5.10: sshd patch. Date this patch was last updated by Sun : Aug/14/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...