Solaris 10 (x86) : 127873-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, inse...

Solaris 10 (x86) : 149107-01 (deprecated)

SunOS 5.10x86: /usr/sfw/lib/gimp/2.0/plug. Date this patch was last updated by Sun : Oct/05/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/11/20. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 149453-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Install/smpatch. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, inser...

Solaris 10 (x86) : 149454-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Install/smpatch. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, inser...

Another Solaris 10 Patch Cluster Symlink Attack

Larry W. Cashdollar 8/6/2012 Here is another symlink attack with temp file creation using process id in Solaris 10 patch cluster. You can over write the contents of root owned files with the contents of inetd.conf. In patches/137097-01/SUNWcsr/reloc/lib/svc/method/inetd-upgrade lines : 72...

Solaris 10 Patch 137097-01 - Symlink Privilege Escalation

Solaris 10 Patch 137097-01 - Symlink Privilege Escalation source: https://www.securityfocus.com/bid/54919/info Solaris 10 Patch 137097-01 is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges on affected computers. !/usr/bin/per...

Solaris 10 Patch 137097-01 - Symlink Privilege Escalation

source: https://www.securityfocus.com/bid/54919/info Solaris 10 Patch 137097-01 is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to gain elevated privileges on affected computers. !/usr/bin/perl $clobber = "/etc/passwd"; while1 open ps,"ps -ef | grep ...

Solaris 10 Patch Cluster Symlink Attack

Larry W. Cashdollar 8/6/2012 Here is another symlink attack with temp file creation using process id in Solaris 10 patch cluster. You can over write the contents of root owned files with the contents of inetd.conf. In patches/137097-01/SUNWcsr/reloc/lib/svc/method/inetd-upgrade lines : 72...

Solaris 10 Patch 137097-01 Symlink Attack Privilege Escalation

Exploit for solaris platform in category local exploits Larry W. Cashdollar 8/6/2012 Here is another symlink attack with temp file creation using process id in Solaris 10 patch cluster. You can over write the contents of root owned files with the contents of inetd.conf. In...

file clobbering vulnerability in Solaris update manager & local root with SUNWbindr install.

Hi list, Two small problems I noticed with Oracle Solaris Update Manager and the latest patch cluster on Solaris 10 x86. += Local Root If the system administrator is updating the system using update manager or smpatch multi user mode a race condition exists with the postinstall script for SUNWbin...

Solaris 10 (sparc) : 141596-10

SunOS 5.10: UFS file system utilities patc. Date this patch was last updated by Sun : Oct/10/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2013/02/25. C Tenable Network Security, Inc. if !...

CVE-2012-3123

Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone...

CVE-2012-1765

CVE-2012-1765 affects Oracle Sun Solaris 10, specifically the Branded Zone component. The vulnerability is described as an unspecified local integrity issue within Branded Zone that can enable a local attacker to write to arbitrary OS locations. Exploitation requires local access (logon) to the o...

CVE-2012-3129

CVE-2012-3129 is linked to Solaris 10 (x86 and SPARC) via the Gnome PDF viewer component. The connected Nessus plugins describe the vulnerability as affecting Solaris 10 and indicate it can be exploited over the network by unauthenticated attackers, with potential impacts including unauthorized u...

CVE-2012-3124

Technical details about CVE-2012-3124 are not publicly provided in the connected documents. The available materials mention an unspecified Solaris 10 kernel/KSSL vulnerability but do not describe affected components, version-specific impacts, exploits, or fixes. Monitor for updates.

CVE-2012-3112

CVE-2012-3112 concerns Oracle Sun Solaris 10, specifically a vulnerability in the Solaris Management Console component. The connected documents describe an unauthenticated network-based risk on Solaris 10, allowing potential modification of data via HTTP-like access. Affected platforms span Solar...

CVE-2012-3123

CVE-2012-3123 impacts Oracle Solaris 10 (x86 and SPARC) via the Solaris Apache HTTP Server component. The vulnerability allows unauthenticated, remote HTTP-based access that can lead to unauthorized read access to Solaris data. Affected patch levels are Solaris 10 update patches 120543-33, -34, -...

CVE-2012-3129

Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, integrity, and availability, related to Gnome PDF viewer...

CVE-2012-3127

Technical details for CVE-2012-3127 are not publicly available in the provided documents. The records only note an unspecified SCTP-related vulnerability in Oracle Solaris 10; monitor for updates.