Sun Solaris Dtsession本地缓冲区溢出漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的通用桌面环境会话管理程序dtsession1X存在缓冲区溢出，本地攻击者可以利用漏洞获得ROOT特权。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 Sun Solaris 9x86 Sun Solaris 9x86...

Solaris 10 (sparc) : 125279-05 (deprecated)

CDE1.6: dtsession patch. Date this patch was last updated by Sun : Nov/27/07 This plugin has been deprecated and either replaced with individual 125279 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Solaris 10 (sparc) : 123324-03

SunOS 5.10: sshd patch. Date this patch was last updated by Sun : Jun/20/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

CVE-2007-3470

Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service kernel panic via unspecified vectors related to "memory buffers" of Secure Socket Layer SSL records...

Code injection

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3469

Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service resource exhaustion and service hang via unspecified vectors...

CVE-2007-3470

Multiple unspecified vulnerabilities in the KSSL kernel module in Sun Solaris 10, when configured with the KSSL proxy, allow remote attackers to cause a denial of service kernel panic via unspecified vectors related to "memory buffers" of Secure Socket Layer SSL records...

CVE-2007-3469

CVE-2007-3469 affects Sun Solaris 10: a vulnerability in the TCP Loopback/Fusion implementation that allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors. The vulnerability is local and requires no authentication. Publicly linked patch ref...

CVE-2007-3470

CVE-2007-3470 affects the Sun Solaris 10 KSSL kernel module when configured with the KSSL proxy. The report describes multiple unspecified vulnerabilities that can be triggered remotely to cause a denial of service (kernel panic) via unspecified vectors related to SSL record memory buffers. The p...

CVE-2007-3248

Unspecified vulnerability in Sun Solaris 10 before 20070614, when IPv6 interfaces are present but not configured for IPsec, allows remote attackers to cause a denial of service system crash via certain network traffic...

CVE-2007-3248

CVE-2007-3248 affects Sun Solaris 10 before 20070614. When IPv6 interfaces are present but not configured for IPsec, remote attackers can cause a denial of service (system crash) via certain network traffic. CVSS2 base score 7.8 (NETWORK, LOW complexity, NO authentication). No explicit remediatio...

Solaris 10 (sparc) : 119783-40 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...

Code injection

Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service system crash via certain XDR data in NFS requests, probably related to processing of data by the xdrbool and xdrmblkgetint32 functions...

CVE-2007-3223

Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service system crash via certain XDR data in NFS requests, probably related to processing of data by the xdrbool and xdrmblkgetint32 functions...

Sun Solaris管理控制台认证和日志机制远程权限提升漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris管理控制台（SMC）的日志机制和认证机制中存在安全漏洞，可能允许本地或远程非特权用户获得对Solaris系统的非授权root用户访问。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法： 以root用户权限执行以下命令停止SMC服务器。 Solaris 8和9： /etc/init.d/init.wbem stop Solaris 10...

Session fixation

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...

CVE-2007-3069

xscreensaver in Sun Solaris 10 before 20070604, when a GNOME session with Assistive Technology support is running, allows attackers with physical access to take control of the session after entering an Alt-Tab sequence...

CVE-2007-3069

CVE-2007-3069 affects Sun Solaris 10 prior to patch 120095-36 (x86) / 120094-36 (sparc) where an active GNOME session with Assistive Technology support can be hijacked via an Alt-Tab sequence when a local attacker has physical access. The description from the primary source specifies the vulnerab...

Solaris 10 (x86) : 120229-45 (deprecated)

Messaging Server 6.3-16.01x86: core patch. Date this patch was last updated by Sun : Nov/30/11 This plugin has been deprecated and either replaced with individual 120229 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

Code injection

srsexec in Sun Remote Services SRS Net Connect Software Proxy Core package in Sun Solaris 10 does not enforce file permissions when opening files, which allows local users to read the first line of arbitrary files via the -d and -v options...