Default credentials

HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opcop account, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2010-0444

HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opcop account, which allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2010-0444

HP Operations Agent running on Solaris 10 (versions 8.51, 8.52, 8.53, 8.60) is affected by a vulnerability where the opc_op account password can be blank, enabling remote attackers to execute arbitrary code via unspecified vectors. The issue arises from a default/blank password configuration for ...

Null pointer dereference

The ucodeioctl function in intel/io/ucodedrv.c in Sun Solaris 10 and OpenSolaris snv69 through snv133, when running on x86 architectures, allows local users to cause a denial of service panic via a request with a 0 size value to the UCODEGETVERSION IOCTL, which triggers a NULL pointer dereference...

CVE-2010-0453

The ucodeioctl function in intel/io/ucodedrv.c in Sun Solaris 10 and OpenSolaris snv69 through snv133, when running on x86 architectures, allows local users to cause a denial of service panic via a request with a 0 size value to the UCODEGETVERSION IOCTL, which triggers a NULL pointer dereference...

Solaris Update for Runtime library for Solaris 10 119281-22

Check for the Version of Runtime library for Solaris 10 OpenVAS Vulnerability Test Solaris Update for Runtime library for Solaris 10 119281-22 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

[TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Oracle Solaris UCODEGETVERSION IOCTL Kernel NULL Pointer Dereference Advisory ID: TKADV2010-001 Revision: 1.0 Release Date: 2010/01/31 Last Modified: 2010/01/31 Date Reported: 2009/11/29 Author: Tobias Klein tk at trapkit.de Affected Softwar...

CVE-2010-0310

Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from software updates...

CVE-2010-0310

CVE-2010-0310 concerns Trusted Extensions in Oracle Solaris 10, where local users may gain privileges due to omission of unspecified libraries during software updates. Connected advisories tie this to Solaris 10 patching for Trusted Extensions: sparc patch 143502-01 and x86 patch 143503-01, with ...

CVE-2009-4314

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...

Design/Logic Flaw

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...

CVE-2009-4314

CVE-2009-4314 affects Sun Ray Server Software 4.1 on Solaris 10. When Automatic Multi-Group Hotdesking (AMGH) is enabled, a logout action results in the user being immediately logged back in, enabling physical access by someone at an unattended DTU device to gain a session. Root cause is the logo...

CVE-2009-4314

Sun Ray Server Software 4.1 on Solaris 10, when Automatic Multi-Group Hotdesking AMGH is enabled, responds to a logout action by immediately logging the user in again, which makes it easier for physically proximate attackers to obtain access to a session by going to an unattended DTU device...

Solaris 10 (x86) : 137148-08 (deprecated)

SunOS 5.10x86: libexpat patch. Date this patch was last updated by Sun : Oct/17/16 This plugin has been deprecated and either replaced with individual 137148 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 142900-15

SunOS 5.10: kernel patch. Date this patch was last updated by Sun : Jul/26/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (x86) : 142901-15

SunOS 5.10x86: kernel patch. Date this patch was last updated by Sun : Jul/26/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...

CVE-2009-4191

Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vdsollocal module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable...

CVE-2009-4075

Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv99 through snv123, allows remote attackers to cause a denial of service daemon outage via unknown vectors that trigger a "dangling sshd authentication thread."...

Design/Logic Flaw

Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv99 through snv123, allows remote attackers to cause a denial of service daemon outage via unknown vectors that trigger a "dangling sshd authentication thread."...

CVE-2009-4075

CVE-2009-4075 is a Solaris 10/OpenSolaris sshd timeout vulnerability causing remote denial of service via a dangling sshd authentication thread. Connected sources confirm affected products include SunOS 5.10 (SPARC and x86) with OpenSolaris snv_99–snv_123. The vulnerability is addressed by Sun pa...