Portcullis Security Advisory 05-014 HP Openview Remote Command Execution Vulnerability

Portcullis Security Advisory 05-014 HP Openview Remote Command Execution Vulnerability Vulnerable System: HP OpenView Network Node Manager 6.41 and 7.5 running on Solaris 8 confirmed HP OpenView Network Node Manager all version all operating systems unconfirmed Vulnerability Title: Unauthenticate...

Solaris 8 (sparc) : 118666-86

JavaSE 5.0: update 85 patch equivalent to JDK 5.0u85. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (x86) : 118668-86

JavaSE 5.0x86: update 85 patch equivalent to JDK 5.0u85. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 118667-86

JavaSE 5.0: update 85 patch equivalent to JDK 5.0u85, 64bit. Date this patch was last updated by Sun : Apr/13/15 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

CVE-2001-1555

ptchmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other users' terminals by modifying the ACL of a TTY...

CVE-2001-1555

CVE-2001-1555 affects Solaris 8 via the pt_chmod path where logout does not call fdetach to reset terminal privileges, enabling local users to modify a TTY ACL and write to other users’ terminals. The available sources describe the vulnerable component and root cause but do not provide explicit p...

Solaris 10 /usr/sbin/traceroute vulnerabilities

/usr/sbin/traceroute from Solaris 10 is vulnerable to buffer overflow in handling -g argument. After supplying 10 -g parameters, return address is overwritten by IP address argument: atari:root:/home/venglin /usr/sbin/traceroute -g 1 -g 2 -g 3 -g 4 -g 5 -g 6 -g 7 -g 8 -g 9 -g 10 127.0.0.1...

CVE-2001-1479

smcboot in Sun SMC Sun Management Center 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMCPORT...

CVE-2002-1763

CVE-2002-1763 targets the Sun Solaris 8 CDE screensaver (dtscreen). The vulnerability arises when the Shift and Return keys are pressed repeatedly and quickly, causing a crash that enables local users to access the current session. The description does not specify a patch or workaround within the...

CVE-2001-1479

Sun Management Center (SMC) 2.0 on Solaris 8 is affected. A local user can delete arbitrary files by exploiting a symlink on /tmp/smc$SMC_PORT, as described in CVE-2001-1479. The issue enables LOCAL access with low complexity and partial integrity impact; no remediation details are provided in th...

CVE-2002-1763

The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session...

CVE-2005-1518

Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services FNS, autofs, and FNS X.500 configuration, allows local users to cause a denial of service automountd crash when "accessing" /xfn/x500...

Solaris 8 (x86) : 109224-10

SunOS 5.8x86: kpasswd, libgss.so.1 and li. Date this patch was last updated by Sun : Aug/10/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 8 (sparc) : 116950-15

SunOS 5.8: ufs patch. Date this patch was last updated by Sun : Nov/09/07 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit...

Solaris 8 (sparc) : 109223-10

SunOS 5.8: kpasswd, libgss.so.1 and libkad. Date this patch was last updated by Sun : Aug/03/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

answerbook2.txt

PTT SECURITY ADVISORY DATE: 08-02-2005 AUTHOR: THOMAS LIAM ROMANIS CURRENT EMPLOYER: Echelon Ltd VENDOR: Sun PRODUCT: Sun AnswerBook2 VERSIONS TESTED: 1.4.4 on Solaris 8.0 Sparc TITLE: Multiple issues in Sun Answerbook2 Full Disclosure. Summary. A number of issues have been identified in Sun...

Solaris 8 (sparc) : 109931-10

CDE 1.4: sdtimage Patch. Date this patch was last updated by Sun : Mar/24/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (x86) : 109932-10

CDE 1.4x86: sdtimage Patch. Date this patch was last updated by Sun : Mar/24/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 116993-01

SunOS 5.8: /usr/bin/newgrp patch. Date this patch was last updated by Sun : Mar/10/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2004-0481

The logging feature in kcmsconfigure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCSClogFile file...