Solaris/SPARC - Bind TCP (2001/TCP) Shell (/bin/sh) Shellcode

Solaris/SPARC - Bind TCP 2001/TCP Shell /bin/sh Shellcode. Shellcode exploit for SolarisSPARC platform !!! $Id: sparc-bind.s,v 1.1 2003/03/01 01:10:51 ghandi Exp $ !!! Bind /bin/sh to TCP port 2001. Calls setuid0 so /bin/sh won't !!! drop privileges. After assembly, change the third byte in the !...

Sun Solaris IP隧道参数空指针引用漏洞

BUGTRAQ ID: 32904 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的IP隧道实现中存在空指针引用漏洞，本地攻击者可以通过发送特制的SIOCGTUNPARAM IOCTL请求导致拒绝服务或执行任意内核态代码。 以下是inet/ip/ip.c中的有漏洞代码段： ... 26692 void 26693 ipprocessioctlipsqt ipsq, queuet q, mblkt mp, void arg 26694 ... 26717 1 ci.ciipif = NULL ... 26735 case TUNCMD: ... 2674...

Solaris 10 (sparc) : 138888-08

SunOS 5.10: Kernel Patch. Date this patch was last updated by Sun : Apr/01/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 127553-08 (deprecated)

Sun Ray Core Services version 4.0 Patch Update. Date this patch was last updated by Sun : Feb/24/10 This plugin has been deprecated and either replaced with individual 127553 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 10 (sparc) : 139483-05

SunOS 5.10: ufs patch. Date this patch was last updated by Sun : Mar/12/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Solaris 5.10 (sparc) : 138686-03

Portal Server 7.2 Solaris sparc: Maintenance Patch. Date this patch was last updated by Sun : Jun/30/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security if !...

Solaris 10 (sparc) : 139390-01

SunOS 5.10: lpadmin and ppdmgr patch. Date this patch was last updated by Sun : Dec/12/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 139481-01

SunOS 5.10: rpc.ypupdated patch. Date this patch was last updated by Sun : Dec/02/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Debian 'login' 本地权限升级漏洞

Debian is prone to a local privilege-escalation vulnerability because of an error in the 'login' program. Local attackers in the UTMP group could exploit this issue to take ownership of arbitrary files on the vulnerable system. This may lead to a complete compromise of the system. Debian Linux 3....

Solaris 9 (sparc) : 118191-05

SunOS 5.9: gtar patch. Date this patch was last updated by Sun : Apr/19/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid3499...

Solaris 9 (sparc) : 118193-04

SunOS 5.9: gtar source patch. Date this patch was last updated by Sun : May/04/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-5099

Sun Logical Domain Manager aka LDoms Manager or ldm 1.0 through 1.0.3 displays the value of the OpenBoot PROM OBP security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l"...

CVE-2008-5099

CVE-2008-5099 affects Sun Logical Domain Manager (LDoms) 1.0–1.0.3. The vulnerability allows local users to read the OBP security-password in cleartext via the improper use of the ldm ls -l command, bypassing SPARC firmware password protection and potentially gaining privileges or data access. Re...

Solaris 10 (sparc) : 138322-03

SunOS 5.10: Perl patch. Date this patch was last updated by Sun : Jun/08/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 138269-02

SunOS 5.10: devfs patch. Date this patch was last updated by Sun : Nov/07/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 137121-06

SunOS 5.10: e1000g driver patch. Date this patch was last updated by Sun : Jan/15/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 138373-02

SunOS 5.10: fifofs patch. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 138361-01 (deprecated)

SunOS 5.10: snmpXdmid patch. Date this patch was last updated by Sun : Nov/07/08 This plugin has been deprecated and either replaced with individual 138361 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Sun Solstice X.25本地拒绝服务漏洞

CNCAN ID：CNCAN-2008111104 Sun Solstice是一款企业级网络管理方案。 Sun Solstice X.25存在拒绝服务问题，本地攻击者可以利用漏洞使系统崩溃。 对"/dev/xty"有读权限的本地非特权用户利用Solstice X.2存在的缺陷可导致多CPU上的系统触发panic，造成拒绝服务攻击。 Solstice X.25 9.x 可参考如下补丁： X.25 9.2 for Solaris 8, 9 and 10 on SPARC:...

CVE-2008-4992

The SPARC hypervisor in Sun System Firmware 6.6.3 through 6.6.5 and 7.1.3 through 7.1.3.e on UltraSPARC T1, T2, and T2+ processors allows logical domain users to access memory in other logical domains via unknown vectors...