Solaris 10 (sparc) : 124997-01 (deprecated)

SunOS 5.10: /usr/bin/tip patch. Date this patch was last updated by Sun : Jan/18/07 This plugin has been deprecated and either replaced with individual 124997 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 124998-01 (deprecated)

SunOS 5.10x86: /usr/bin/tip patch. Date this patch was last updated by Sun : Jan/18/07 This plugin has been deprecated and either replaced with individual 124998 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 124923-03

SunOS 5.10x86: ld.so.1 patch. Date this patch was last updated by Sun : Apr/09/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 10 (sparc) : 119998-02

SunOS 5.10: arp, ip, ipsecah drivers patch. Date this patch was last updated by Sun : Feb/09/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 119999-03

SunOS 5.10x86: arp, ip, ipsecah drivers p. Date this patch was last updated by Sun : Feb/09/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris telnetd authentication bypass

Added: 02/16/2007 CVE: CVE-2007-0882 BID: 22512 OSVDB: 31881 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program in Solaris 10 and 11...

Race condition

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

CVE-2007-0914

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

CVE-2007-0914

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

CVE-2007-0914

CVE-2007-0914 documents a race condition in the Solaris 10 TCP subsystem that can be triggered remotely to cause a denial of service (system panic). The vulnerability affects Solaris 10 (SunOS 5.10) TCP processing, with evidence of multiple references tracking the issue and an associated patch: S...

CVE-2007-0914: Undefined Security Weakness

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service system panic via unknown vectors...

CVE-2007-0895

Race condition in recursive directory deletion with the 1 -r or 2 -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which causes rm to chdir to...

CVE-2007-0895: Undefined Security Weakness

Race condition in recursive directory deletion with the 1 -r or 2 -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which causes rm to chdir to...

Design/Logic Flaw

Argument injection vulnerability in the telnet daemon in.telnetd in Solaris 10 and 11 SunOS 5.10 and 5.11 misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the...

Sun Solaris Telnet Remote Authentication Bypass Vulnerability

Description Sun Solaris 10 is prone to a vulnerability that allows remote attackers to bypass authentication. Successfully exploiting this issue allows remote attackers to gain remote access to vulnerable computers. If the targeted computer is configured to allow non-console logins for superusers...

CVE-2007-0882: Improper Neutralization of Argument Delimiters in a Command

Argument injection vulnerability in the telnet daemon in.telnetd in Solaris 10 and 11 SunOS 5.10 and 5.11 misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the...

Solaris 10/11 Telnetd Bypass

telnetd on Solaris 10/11 allows for access bypass by passing a username to -l -f. This doesn't work for root but works for all other uids. POC: telnet -l "-fbin" targetaddress Discovered by kcope...

Denial of service

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...

CVE-2007-0668

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...

CVE-2007-0668

The CVE-2007-0668 entry covers Sun Solaris 10’s Loopback Filesystem (LOFS). Affected: LOFS in a non-global zone. Issue: local users can move and rename files within a read-only filesystem, which can cause a denial of service. Root cause: insufficient protection of file operations in LOFS enabling...