CVE-2004-1393

Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service system hang...

Solaris 2.6789 (SPARC) - ld.so.1 Local Privilege Escalation

Solaris 2.6789 SPARC - ld.so.1 Local Privilege Escalation / $Id: raptorldpreload.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorldpreload.c - ld.so.1 local, Solaris/SPARC 2.6/7/8/9 Copyright c 2003-2004 Marco Ivaldi Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 throug...

[SA13401] Sun Solaris in.rwhod Unspecified Vulnerability

TITLE: Sun Solaris in.rwhod Unspecified Vulnerability SECUNIA ADVISORY ID: SA13401 VERIFY ADVISORY: http://secunia.com/advisories/13401/ CRITICAL: Moderately critical IMPACT: System access WHERE: From local network OPERATING SYSTEM: Sun Solaris 9 http://secunia.com/product/95/ Sun Solaris 8...

Solaris in.rwhod privilege escalation

No description provided...

CVE-2004-0360

Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors...

CVE-2001-1328

Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code...

CVE-2001-1066

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2002-1296

Directory traversal vulnerability in priocntl system call in Solaris does allows local users to execute arbitrary code via ".." sequences in the pcclname field of a pcinfot structure, which cause priocntl to load a malicious kernel module...

Solaris in.fingerd Crafted Request Information Disclosure

Binary data 1280.prm...

Sun Solaris contains a vulnerability in the tcsetattr() library function

Overview A vulnerability in the Sun Solaris tcsetattr library function could allow a unprivileged local user to cause the system to hang. Description Sun Solaris uses a tcsetattr library function to set the parameters associated with the terminal. There is an unspecified vulnerability in the...

CVE-2004-0360

Unknown vulnerability in passwd1 in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors...

Solaris conv_fix insecure file handling vulnerability

Overview A vulnerability in a program supplied with the Solaris printing system could allow a local attacker to gain elevated privileges on the system. Description The Solaris operating system from Sun Microsystems includes a number of supplemental programs to aid in configuration and maintenance...

CVE-2003-1082

Buffer overflow in utmpupdate for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068...

CVE-2003-1062

Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory...

Solaris Sadmind Default Configuration Remote Root Exploit

Exploit for solaris platform in category remote exploits ========================================================= Solaris Sadmind Default Configuration Remote Root Exploit ========================================================= !/usr/bin/perl -w Title: rootdown.pl Purpose: Solaris Remote comma...

CVE-2003-0669

Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service system panic via "a rare race condition" or an attack by local users...

Immunity Canvas: SOLARIS_LD_PRELOAD

Name| solarisLDPRELOAD ---|--- CVE| CVE-2003-0609 Exploit Pack| CANVAS Description| Solaris LDPRELOAD debug edition Notes| References: http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-26-55680-1 CVE Name: CVE-2003-0609 VENDOR: Sun Notes: This is a classic local root elevation environmen...

CVE-2003-0669

Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service system panic via "a rare race condition" or an attack by local users...

CVE-2003-1068

Buffer overflow in utmpupdate for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than CVE-2003-1082...

Solaris in.lpd Crafted Job Request Arbitrary Remote Command Execution

The remote lpd daemon is vulnerable to an environment error that could allow an attacker to execute arbitrary commands on this host. Nessus uses this vulnerability to retrieve the password file of the remote host although any command could be executed. %NASLMINLEVEL 70300 C Tenable Network...