CVE-2001-1582

This CVE describes a buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8. The flaw lets local users execute arbitrary code by passing a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap. Connected sources (Red Hat, CVE listing, NVD) corr...

Null pointer dereference

Unspecified vulnerability in the strfreectty function in the Special File System SPECFS in Sun Solaris 8 through 10 allows local users to cause a denial of service system panic, related to passing a NULL pointer to the pgsignal function...

CVE-2007-4395

Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...

CVE-2007-4395

Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...

CVE-2007-4395

Technical details about CVE-2007-4395 are not publicly available in the provided connected documents. The OpenVAS entries and external references do not specify affected products, versions, root cause, or fixes. Monitor for updates.

Design/Logic Flaw

Unspecified vulnerability in Low Bandwidth X proxy lbxproxy on Sun Solaris 8 through 10 before 20070725 allows local users to read arbitrary files with root group ownership via unknown vectors...

Solaris 8 (x86) : 114670-04

SunOS 5.8x86: /usr/bin/rcp patch. Date this patch was last updated by Sun : Jul/09/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Sun Solaris Dtsession本地缓冲区溢出漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的通用桌面环境会话管理程序dtsession1X存在缓冲区溢出，本地攻击者可以利用漏洞获得ROOT特权。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 Sun Solaris 9x86 Sun Solaris 9x86...

Solaris 8 (x86) : 126374-05

SunOS 5.8x86: libsldap patch. Date this patch was last updated by Sun : Nov/12/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 126928-02

SunOS 5.8: rpcsecgss patch. Date this patch was last updated by Sun : Oct/19/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2007-3283

GNOME XScreenSaver in Sun Solaris 8 and 9 before 20070417, when root is logged into the console, does not automatically lock the screen after a session has been inactive, which might allow physically proximate attackers to access the console...

Sun Solaris管理控制台认证和日志机制远程权限提升漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris管理控制台（SMC）的日志机制和认证机制中存在安全漏洞，可能允许本地或远程非特权用户获得对Solaris系统的非授权root用户访问。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法： 以root用户权限执行以下命令停止SMC服务器。 Solaris 8和9： /etc/init.d/init.wbem stop Solaris 10...

Solaris 8 (i386) : 125672-01

The remote host is missing Sun Security Patch number 125672-01 patch Solaris Security Toolkit 4.2 for LDOMS 1.0. Date this patch was last updated by Sun : Tue May 08 02:51:20 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Solaris 8 (sparc) : 125672-01

The remote host is missing Sun Security Patch number 125672-01 patch Solaris Security Toolkit 4.2 for LDOMS 1.0. Date this patch was last updated by Sun : Tue May 08 02:51:20 MDT 2007 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has...

Solaris 9 (sparc) : 125713-02

NetConnect 3.2.3: srsexec patch for Solaris 8/9/10. Date this patch was last updated by Sun : Oct/22/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

Immunity Canvas: SOLARIS_SAMBA

Name| solarissamba ---|--- CVE| CVE-2007-2446 Exploit Pack| CANVAS Description| SAMBA apilsalookupsids Notes| CVE Name: CVE-2007-2446 VENDOR: Sun and Samba Platforms Tested: Solaris 9 with default SAMBA 2.2.8a, Solaris 8 with sunfreeware SAMBA 3.0.10 Date public: 5/15/2007 CVE Url:...

Solaris 8 (x86) : 125803-01

SunOS 5.8x86: Modular Debugger patch. Date this patch was last updated by Sun : Apr/06/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Sun Solaris IP实现远程拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 8/9的IP实现上存在安全漏洞，远程非特权用户可能利用此漏洞通过发送特制IP报文降低联网Solaris系统的性能。 Solaris系统上可见大量的伪造IP碎片和/或大量的IP碎片重组失败。例如，运行以下命令： % /usr/bin/netstat -s | /usr/bin/egrep 'ReasmDuplicates|ReasmFails' 可能显示很高的ipv6ReasmDuplicates和ipv6ReasmFails计数器值。 此外，单处理器的Solaris...

Design/Logic Flaw

Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service CPU consumption via crafted IP packets, probably related to fragmented packets with duplicate or missing fragments...