Solaris 8 (sparc) : 108964-11

SunOS 5.8: in.tftpd and snoop patch. Date this patch was last updated by Sun : Aug/04/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Sun Solaris可信扩展标记网络安全绕过漏洞

BUGTRAQ ID: 30602 CNCAN ID：CNCAN-2008081102 Sun Solaris是一款商业性质的操作系统。 Sun Solaris存在安全绕过问题，远程攻击者可以利用漏洞获得对管理域的访问，可能导致特权提升。 如果一个Solaris可信扩展系统有一个标记域在"installed"状态，Solaris可信扩展标记网络存在安全问题允许从其他系统在相同标签远程未授权获得对受此漏洞影响息沟通的全局域访问。如果用户在全局域中有合法用户名和密码，这是强制访问控制MAC策略冲突。全局域域在可信扩展系统中属于管理域，只能管理员角色才能访问。 Sun Solaris 10x8...

Solaris 9 (sparc) : 137400-01

SunOS 5.9: picld patch. Date this patch was last updated by Sun : Jul/23/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 112169-07

SunOS 5.8: platmod patch for Volume System H/W Series Products. Date this patch was last updated by Sun : Jul/23/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : linux, linux-source-2.6.15/20/22 vulnerabilities (USN-625-1)

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

RedHat userhelper/PAM安全漏洞

RedHat 6.0和6.1系统中缺省安装的userhelper和PAM允许使用包含".."的路径名,并且 userhelper被设置了suid root位.因此本地用户可能获得root权限. userhleper允许你通过"-w"参数指定一个要运行的程序,这些程序需要在 /etc/security/console.apps目录里有一个对应文件.因此,通过指定类似"../../../ tmp/myprog"的程序名,攻击者可以利用userhelper去执行 "/etc/security/console.apps/../../../tmp/myprog",也就是执行"/tmp/myprog...

Solaris Runtime Linker (ld.so.1) Buffer Overflow Exploit (SPARC version)

No description provided by source. / ld.so.1 exploit SPARC coded by: osker178 bjr213 psu.edu Alright, so this exploits a fairly standard buffer overflow in the default Solaris runtime linker ld.so.1 discovery by Jouko Pynnonen Only real deviation here from the standard overflow and return into li...

Fedora 9 : java-1.6.0-openjdk-1.6.0.0-0.16.b09.fc9 (2008-6439)

Tue Jul 8 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Only apply hotspot security patch of jitarches. - Wed Jul 2 2008 Lillian Angel - 1:1.6.0-0.16.b09 - Added OpenJDK security patches. - Sat Jun 7 2008 Tom 'spot' Callaway - 1:1.6.0-0.16.b09 - enable sparc/sparc64 builds - Sat May 31 2008 Thomas...

Solaris 7/8/9 CDE LibDTHelp Local Buffer Overflow Exploit

No description provided by source. / $Id: raptorlibdthelp.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorlibdthelp.c - libDtHelp.so local, Solaris/SPARC 7/8/9 Copyright c 2003-2004 Marco Ivaldi [email protected] Buffer overflow in CDE libDtHelp library allows local users to execute arbitrary...

Debian 2.1 apcd符号链接漏洞

和Debian GNT/Linux 2.1一起发行的apcd软件包存在符号链接漏洞。当apcd进程接收到一个SIGUSR1信号时，会将其状态信息保存到/tmp/upsstat。然而由于这个文件没有被安全地打开，可能会导致符号链接攻击。 Debian GNU/Linux 2.1 该漏洞在0.6a.nr-4slink1版本中被修补，建议立刻升级apcd软件包。 Source archives: http://security.debian.org/dists/stable/updates/source/apcd0.6a.nr-4slink1.diff.gz MD5 checksum:...

USN-625-1: Linux kernel vulnerabilities

Dirk Nehring discovered that the IPsec protocol stack did not correctly handle fragmented ESP packets. A remote attacker could exploit this to crash the system, leading to a denial of service. CVE-2007-6282 Johannes Bauer discovered that the 64bit kernel did not correctly handle hrtimer updates. ...

[SECURITY] [DSA 1598-1] New libtk-img packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1598-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst June 19, 2008 http://www.debian.org/security/faq -...

Solaris 10 (sparc) : 136892-01

SunOS 5.10: libc.so.1.9 patch. Date this patch was last updated by Sun : Jun/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 137289-02

SunOS 5.10: e1000g driver patch. Date this patch was last updated by Sun : Jul/15/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 121657-54 (deprecated)

Calendar Server SunOS 5.9 5.10: Core patch. Date this patch was last updated by Sun : Aug/14/13 This plugin has been deprecated and either replaced with individual 121657 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Solaris 9 (sparc) : 121657-54

Calendar Server SunOS 5.9 5.10: Core patch. Date this patch was last updated by Sun : Aug/14/13 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 111327-06

SunOS 5.8: libsocket patch. Date this patch was last updated by Sun : Jun/06/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Debian Security Advisory DSA 1588-2 (linux-2.6)

The remote host is missing an update to linux-2.6 announced via advisory DSA 1588-2. OpenVAS Vulnerability Test $Id: deb15882.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1588-2 linux-2.6 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Solaris 2.5.1/2.6/7/8 rlogin /bin/login Buffer Overflow Exploit (SPARC)

No description provided by source. / $Id: raptorrlogin.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorrlogin.c - rlogin, Solaris/SPARC 2.5.1/2.6/7/8 Copyright c 2004 Marco Ivaldi [email protected] Buffer overflow in login in various System V based operating systems ...

CVS Remote Entry Line Root Heap Overflow Exploit

No description provided by source. include stdio.h include string.h include unistd.h include stdlib.h include sys/types.h include signal.h include sys/socket.h include netinet/in.h include stdarg.h include netdb.h include errno.h include sys/time.h include fcntl.h include zlib.h define CVSPORT 24...