CVE-2006-4842: Improper Input Validation

The Netscape Portable Runtime NSPR API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from setuid programs, which allows local users to create or overwrite arbitrary files...

CVE-2006-5213

Sun Solaris 10 prior to 20061006 is affected by CVE-2006-5213 due to incorrect and insufficient permission checks when a local user creates a raw socket on a link aggregation device, enabling interception or spoofing of packets. The vulnerability arises from how the kernel handles raw sockets on ...

CVE-2006-5213

Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by creating a raw socket on a link aggregation network device aggregation...

CVE-2006-5214

CVE-2006-5214 describes a race condition in the Xsession handling of X Display Manager environments affecting NetBSD, X.Org, and Solaris releases as listed; the root cause is a window between creating the user’s Xsession errors file and applying the chmod, which can let local users read other use...

CVE-2006-5213: Undefined Security Weakness

Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by creating a raw socket on a link aggregation network device aggregation...

CVE-2006-5075: Undefined Security Weakness

The Kernel SSL Proxy service svc:/network/ssl/proxy in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service system crash via unspecified vectors related to an SSL client...

CVE-2006-5013

Sun Solaris 10 before patch 118855-16 20060925, when run on x64 systems using IPv6, allows remote attackers to cause a denial of service kernel panic via crafted IPv6 packets...

CVE-2006-5013

Sun Solaris 10 before patch 118855-16 20060925, when run on x64 systems using IPv6, allows remote attackers to cause a denial of service kernel panic via crafted IPv6 packets...

CVE-2006-5012

Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service disable syslog and prevent security messages from being logged via unspecified vectors...

CVE-2006-5013: Undefined Security Weakness

Sun Solaris 10 before patch 118855-16 20060925, when run on x64 systems using IPv6, allows remote attackers to cause a denial of service kernel panic via crafted IPv6 packets...

CVE-2006-4655: Undefined Security Weakness

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long XKBCHARSET environment variable value...

X11R6 6.4 XKEYBOARD (SolarisSPARC) - Local Buffer Overflow (1)

X11R6 6.4 XKEYBOARD SolarisSPARC - Local Buffer Overflow 1 / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public Licen...

CVE-2006-4439

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

CVE-2006-4439

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

CVE-2006-4439: Undefined Security Weakness

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

CVE-2006-4319

Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format such as the "File System Management" RBAC profile to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307...

CVE-2006-4303

Race condition in 1 libnsl and 2 TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service "tight loop" and CPU consumption for listener applications via unknown vectors related to TCP fusion dotcpfusion...

CVE-2006-4303

CVE-2006-4303 describes a race condition in Sun Solaris 10 affecting libnsl and the TLI/XTI API routines (do_tcp_fusion) that can enable remote denial of service by causing a tight loop and CPU consumption in listener applications. The NVD summary indicates an availability impact (PARTIAL) with n...

[SA21581] Sun Solaris RBAC Profile Privilege Escalation Vulnerabilities

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

CVE-2006-4303: Undefined Security Weakness

Race condition in 1 libnsl and 2 TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service "tight loop" and CPU consumption for listener applications via unknown vectors related to TCP fusion dotcpfusion...