CVE-2015-4920

CVE-2015-4920 is a Solaris 11 vulnerability affecting the NDMP Backup Service component. The connected documents indicate it enables local users to impact integrity via NDMP-related operations, with the issue tied to Solaris 11 patches in the Jan 2016 CPU (SRU11_3_0_0_0) set, which lists CVE-2015...

CVE-2015-0397

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to File System, a different vulnerability than CVE-2014-6570 and CVE-2014-6600...

CVE-2015-0397

CVE-2015-0397 is an unspecified local vulnerability in Oracle Solaris 11, affecting the File System subcomponent and impacting availability. The vulnerability is exploited locally via unknown vectors, with a partial denial of service impact as described in the associated NASL entries for the Sola...

CVE-2014-6600

CVE-2014-6600 is an unspecified local-file-system vulnerability in Oracle Solaris 11 that affects availability. Evidence from the Oracle Jan 2015 CPU (SRU11_2_4_6_0) and Tenable NASL plugins confirms vulnerability in the Solaris File System subcomponent with local access and potential complete de...

CVE-2015-0378

CVE-2015-0378 is an Oracle Solaris 11 local vulnerability affecting the Libc component. The connected Nessus/SRU plugin explicitly ties CVE-2015-0378 to the Libc subsystem and describes an easily exploitable condition that can lead to partial denial of service (DOS) via local access. The Solaris ...

Authentication flaw

Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect availability via unknown vectors related to Network, a different vulnerability than CVE-2004-0230...

CVE-2014-6570

CVE-2014-6570 is a local, unspecified vulnerability in Oracle Solaris 11 affecting the File System component, with impact stated as a denial or availability issue. The advisory context across connected documents confirms Solaris 11 is the affected platform, and that patches addressing this and re...

CVE-2014-6510

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility...

Oracle Solaris Third-Party Patch Update : perl-58 (cve_2011_2728_denial_of)

The remote Solaris system is missing necessary patches to address security updates : - The bsdglob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service crash via a glob expression with the GLOBALTDIRFUNC flag, which triggers an...

Oracle Solaris Third-Party Patch Update : proftpd (cve_2011_4130_use_after)

The remote Solaris system is missing necessary patches to address security updates : - Use-after-free vulnerability in the Response API in ProFTPD before 1.3.3g allows remote authenticated users to execute arbitrary code via vectors involving an error that occurs after an FTP data transfer...

Oracle Solaris Third-Party Patch Update : samba (cve_2012_1182_arbitrary_code)

The remote Solaris system is missing necessary patches to address security updates : - The RPC code generator in Samba 3.x before 3.4.16, 3.5.x before 3.5.14, and 3.6.x before 3.6.4 does not implement validation of an array length in a manner consistent with validation of array memory allocation,...

Oracle Solaris Third-Party Patch Update : libvorbis (cve_2012_0444_memory_corruption)

The remote Solaris system is missing necessary patches to address security updates : - Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers t...

CVE-2014-6497

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Kernel...

CVE-2014-6501

CVE-2014-6501 is referenced in Oracle Solaris 11 as a local-privilege/confidentiality issue related to SSH. The connected documents provide concrete details that Solaris 11 SSH is affected and that this CVE is among fixes in the Oracle OCT2014 CPU (and a Nessus plugin notes the SSH subcomponent v...

CVE-2014-6490

CVE-2014-6490 is a Solaris 11 vulnerability affecting the SMB server user component. The issue enables unauthenticated, network-based SMB access that can cause a partial denial of service on affected Solaris systems. The related Oracle Solaris oct2014 CPU advisory/patch set addresses this and oth...

CVE-2014-6529

CVE-2014-6529 affects Oracle Solaris 11, with the Hermon HCA PCIe driver as the vulnerable component. The vulnerability is described as unspecified in the driver, enabling remote attackers to impact confidentiality, integrity, and availability. The linked Oracle Oct2014 CPU advisory (and the Sola...

CVE-2014-4276

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Common Internet File System CIFS...

CVE-2014-4277

Technical details (affected products, vulnerable components, root cause, impact, or mitigations) are not provided in the connected documents. Monitor for updates.

CVE-2014-4282

CVE-2014-4282 affects Oracle Solaris 11, with a Kernel/X86 component vulnerability that is exploitable by a local user and can lead to an OS takeover with arbitrary code execution. The connected Nessus/patch materials confirm the kernel/X86 subcomponent and local-access exploit path, but do not p...