CVE-2002-0085

cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service crash via an invalid procedure call in an RPC request...

Sawmill 6.2.x - Admin Password Insecure Default Permissions

source: https://www.securityfocus.com/bid/4077/info Sawmill is commercial log analysis software. It runs on most Unix and Linux variants, Microsoft Windows NT/2000 operating systems and MacOS. Sawmill creates the file AdminPassword with insecure default permissions on Solaris platforms...

Дырка в ufsrestore под Solaris

Классическое переполнение буфера позволяет получить привелегии root...

CVE-2001-1066

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack...

Solaris in.lpd Transfer Job Routine Remote Buffer Overflow

The remote lpd daemon seems to be vulnerable to a buffer overflow when sent too many 'Receive data file' commands. An attacker may use this flaw to gain root on this host. C Tenable Network Security, Inc. This plugin was realized thanks to the help of the french "eXperts" working group -...

Solaris 2.678 (SPARC) - xlock Heap Overflow

Solaris 2.678 SPARC - xlock Heap Overflow // source: https://www.securityfocus.com/bid/3160/info Xlock is a utility for locking X-windows displays. It is installed setuid root because it uses the user's password to authorize access to the display when it is locked. The version of xlock that ships...

Solaris whodo Vulnerability

Vulnerability in Solaris whodo Date Published: July 5, 2001 Advisory ID: N/A Bugtraq ID: 2935 CVE CAN: Non currently assigned. Title: Solaris whodo Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The whodo...

CVE-2001-1328

Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code...

Solaris /opt/SUNWvts/bin/ptexec Vulnerability

Vulnerability in Solaris /opt/SUNWvts/bin/ptexec Date Published: June 21, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris /opt/SUNWvts/bin/ptexec Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes...

Solaris /opt/SUNWssp/bin/cb_reset Vulnerability

Vulnerability in Solaris /opt/SUNWssp/bin/cbreset Date Published: June 12, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris /opt/SUNWssp/bin/cbreset Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes...

ISSalert: ISS Advisory: Remote Buffer Overflow Vulnerability in Solaris Print Protocol Daemon

Internet Security Systems Security Advisory June 19, 2001 Remote Buffer Overflow Vulnerability in Solaris Print Protocol Daemon Synopsis: ISS X-Force has discovered a buffer overflow in the Solaris line printer daemon in.lpd that may allow a remote or local attacker to crash the daemon or execute...

CVE-2001-0401

Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable...

Solaris 2.6/2.6/7.0/8 whodo - Local Buffer Overflow

// source: https://www.securityfocus.com/bid/2935/info The 'whodo' utility shipped with Sun Microsystems' Solaris provides a listing of users online and their activities. It is installed setuid root because it reads from the 'utmp' log as well as from the process table. 'whodo' contains a buffer...

Security Bulletin #00202 (i386 syscalls)

Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00202 Date: May 15, 2001 Cross-Ref: Title: i386 syscalls The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind whatsoever with respect to the information contained in this Security...

Дырка в Solaris на Intel (level evaluation)

Процесс может подняться на более высокий уровень выполнения...

Solaris /usr/bin/tip Vulnerability

Vulnerability in Solaris tip1 Date Published: March 27, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris tip1 Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The tip...

CVE-2001-0059

patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack...

Solaris 2.6/2.7 - '/usr/bin/write' Local Overflow

include include / /usr/bin/write overflow proof of conecpt. Tested on Solaris 7 x86 Pablo Sor, Buenos Aires, Argentina. 01/2000 [email protected] usage: write-exp shelloffset retaddroffset default offset should work. / long getesp asm"movl %esp,%eax"; char shell =...

Solaris /usr/bin/cu Vulnerability

Description The /usr/bin/cu command contains a buffer overflow, the problem occurs when it copy his own name argv0 to an internal variable without checking out its lenght and this causes the overflow. Vulnerable Versions Sun Solaris 2.4 Sun Solaris 2.5 Sun Solaris 2.5.1 Sun Solaris 2.6 Sun Solari...

Solaris /usr/bin/write Vulnerability

I have written an exploit for the /usr/bin/write command , this is not a new vulnerability but it has not been fixed at least till Solaris 7 patchs dont know about Solaris 8. This command contains a buffer overflow in the second argument. If this data exceeds predefined length, inserting two valu...