xorg-x11-server 1.20.3 (Solaris 11) - inittab Local Privilege Escalation

xorg-x11-server 1.20.3 Solaris 11 - inittab Local Privilege Escalation !/bin/sh Exploit Title: xorg-x11-server A flaw was found in xorg-x11-server before 1.20.3. An incorrect permission check for -modulepath and -logfile options when starting Xorg. X server allows unprivileged users with the...

Solaris 10 (x86) : 150837-01

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC Utility. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Design/Logic Flaw

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

Solaris 11 : Multiple Kernel Vulnerabilities

The remote Solaris host is missing a vendor-supplied security patch. It is, therefore, affected by the following vulnerabilities : - Multiple security bypass vulnerabilities exist in the Kernel subcomponent that allow a specially crafted application to circumvent the stack guard page security...

Code injection

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via unknown vectors related to Zones...

CVE-2015-4920

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vectors related to NDMP Backup Service...

CVE-2016-0428

Solaris 11 Verified Boot component has an unspecified vulnerability that enables local attackers to cause denial of service (hang/crash) of the OS. Multiple connected sources (CNVD-2016-00549, NVD/NASL plugin) explicitly describe a local DoS impact tied to the Solaris Verified Boot, with no publi...

CVE-2016-0440

CVE-2016-0440 affects Oracle Solaris 11, with a vulnerability in the NFSv4 component that enables remote attackers to impact availability via unauthenticated network actions related to NFSv4. The Connected documents confirm the vulnerability is associated with Solaris 11 and NFSv4, and they descr...

CVE-2016-0458

CVE-2016-0458 targets Oracle Sun Solaris 11 and involves the Solaris kernel’s Kernel DAX component. Connected sources describe an unspecified vulnerability in the Kernel DAX area that can affect availability. NVD notes local users compromising availability, while CNVD references a remote-exploita...

CVE-2016-0493

CVE-2016-0493 applies to Oracle Solaris 11, describing an unspecified vulnerability in the Solaris Kernel Cryptography component. The issue permits local attackers to impact integrity and availability via unknown vectors related to Kernel Cryptography. Exploitation details in the provided documen...

CVE-2016-0416

CVE-2016-0416 affects Oracle Solaris 11, specifically the System Archive Utility. The vulnerability allows remote attackers to affect integrity via unknown vectors over the network; authentication is not required and the impact is listed as Partial Integrity. CVSS metrics from NVD indicate an att...

CVE-2016-0418

Public technical details specific to CVE-2016-0418 (product, version, root cause, or fix) are not provided in the connected documents. Monitor for updates; available sources describe Solaris Kernel Zones vulnerabilities at a high level without CVE-2016-0418 specifics.

CVE-2016-0618

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via unknown vectors related to Zones...

CVE-2015-4922

CVE-2015-4922 affects Oracle Solaris 11, with the vulnerability located in the Boot component. The available connected documents indicate a local-privilege path allowing a partial denial of service to Solaris, but do not provide explicit technical root-cause details beyond this, nor concrete expl...

CVE-2015-4920

CVE-2015-4920 is a Solaris 11 vulnerability affecting the NDMP Backup Service component. The connected documents indicate it enables local users to impact integrity via NDMP-related operations, with the issue tied to Solaris 11 patches in the Jan 2016 CPU (SRU11_3_0_0_0) set, which lists CVE-2015...

CVE-2016-0403

CVE-2016-0403 is an impact described in connected sources as a Solaris SMB Utilities component denial-of-service vulnerability on Oracle Solaris 11. It allows remote attackers to cause a complete denial of service via SMB, with the underlying issue tied to the SMB Utilities component. The exploit...

CVE-2016-0419

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2016-0406

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc...

CVE-2016-0406

CVE-2016-0406 affects Oracle Solaris 11, specifically the Libc Library component. The connected sources indicate an unspecified vulnerability in Solaris Libc that could allow local users to impact integrity and availability. The CNVD/NVD entries consistently name Solaris Libc as the affected subc...