Solaris 8/9 - '/usr/ucb/ps' Local Information Leak

!/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi A security vulnerability in the "/usr/ucb/ps" see ps1B command may allow unprivileged local users the ability to see environment variables and the...

Solaris 8 / 9 (/usr/ucb/ps) Local Information Leak Exploit

Exploit for solaris platform in category local exploits ========================================================== Solaris 8 / 9 /usr/ucb/ps Local Information Leak Exploit ========================================================== !/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $...

Solaris 9 (sparc) : 117125-03

SunOS 5.9: kernel/fs/procfs Patch. Date this patch was last updated by Sun : Aug/10/06 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 9 (x86) : 119439-15

SunOS 5.9x86: NFS Daemon, rpcmod Patch. Date this patch was last updated by Sun : Mar/12/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 9 (x86) : 114423-09

SunOS 5.9x86: format, lp, IKE patch. Date this patch was last updated by Sun : Mar/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 9 (sparc) : 113072-08

SunOS 5.9: patch /usr/sbin/format. Date this patch was last updated by Sun : Jul/21/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2006-3920

The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service resource exhaustion via a TCP packet with an incorrect sequence number, which triggers an ACK storm...

Solaris 8/9 ps - Environment Variable Information leak

Solaris 8/9 ps - Environment Variable Information leak. CVE-1999-1587. Local exploit for Solaris platform !/bin/sh $Id: raptorucbps,v 1.1 2006/07/26 12:15:42 raptor Exp $ raptorucbps - information leak with Solaris /usr/ucb/ps Copyright c 2006 Marco Ivaldi A security vulnerability in the...

CVE-2006-2298

The Internet Key Exchange version 1 IKEv1 implementation in the libike library in Solaris 9 and 10 allows remote attackers to cause a denial of service in.iked daemon crash via crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1...

Solaris 9 (x86) : 118536-06

SunOS 5.9x86: sh/jsh/rsh/pfsh Patch. Date this patch was last updated by Sun : Aug/17/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descriptio...

Solaris 9 (x86) : 115678-02

SunOS 5.9x86:/usr/lib/ldap/idsconfig Patch. Date this patch was last updated by Sun : Apr/07/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Design/Logic Flaw

Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name rootDN password when a privileged user 1 runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including 2 ldapadd, 3 ldapdelete, 4 ldapmodify, 5 ldapmodrd...

Solaris 9 (sparc) : 120240-01

SunOS 5.9: ps cmd patch. Date this patch was last updated by Sun : Mar/24/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 120239-01

SunOS 5.9x86: ps cmd patch. Date this patch was last updated by Sun : Mar/24/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 116047-03

SunOS 5.9: hsfs Patch. Date this patch was last updated by Sun : Feb/22/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid2101...

[SA18421] Sun Solaris Unspecified Privilege Escalation and Denial of Service

TITLE: Sun Solaris Unspecified Privilege Escalation and Denial of Service SECUNIA ADVISORY ID: SA18421 VERIFY ADVISORY: http://secunia.com/advisories/18421/ CRITICAL: Less critical IMPACT: Privilege escalation, DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/...

CVE-2005-3781

Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries."...

CVE-2005-3781

The CVE-2005-3781 issue affects Solaris 9’s in.named and is described as a denial‑of‑service via manipulation causing unnecessary queries. Connected sources identify concrete remediation: SunOS 5.9 SPARC needs patch 112970-12 and SunOS 5.9 x86 needs patch 114354-11 to address libresolv. The exact...

CVE-2005-3781

Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries."...

CVE-2005-3674

The Internet Key Exchange version 1 IKEv1 implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of service in.iked crash via certain crafted IKE packets, as demonstrated by the PROTOS ISAKMP Test Suite for IKEv1. NOTE: due to the lack of details in...