505 matches found
Дырка в write в Solaris
Переполнение буфера в аргументе командной строки дает возможность получить egid tty...
Catman file clobbering vulnerability Solaris 2.x
Solaris 2.7/2.8 catman temp file vulnerability. Larry W. Cashdollar Vapid Labs Date Published: 12/18/2000 Advisory ID: 11242000-02 Risk: Low Title: catman temp file vulnerability. Class: insecure temp file handling. Remotely Exploitable: no Locally Exploitable: Yes Vulnerability Description:...
DOS on RealSecure 3.2
Bulletin : 243 Title: Denial of Service RealSecure Information Date: 8/4/00 Product: Realsecure Company: ISS - Internet Security Systems Issued by: Mуdulo Security Labs Abstract: The Modulo Security Labs Team found during a test program two ways to stop the ISS RealSecure 3.2.x engine. The engine...
CVE-2000-0030
Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...
CVE-1999-0378
InterScan VirusWall for Solaris doesn't scan files for viruses when a single HTTP request includes two GET commands...
Переполнение буфера в lpset под Solaris
32-байтное переполнение буфера...
Solaris 2.67.0 - lpset -r Local Buffer Overflow (1)
Solaris 2.67.0 - lpset -r Local Buffer Overflow 1 // source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. Howeve...
Solaris 2.67.0 - lpset -r Local Buffer Overflow (3)
Solaris 2.67.0 - lpset -r Local Buffer Overflow 3 / source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (2)
// source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
Solaris 2.6/7.0 - 'lpset -r' Local Buffer Overflow (3)
/ source: https://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a well crafted buffer containing...
CVE-1999-0786
The dynamic linker in Solaris allows a local user to create arbitrary files via the LDPROFILE environmental variable and a symlink attack...
CVE-1999-0818
Buffer overflow in Solaris kcmsconfigure via a long NETPATH environmental variable...
CVE-2000-0030
Solaris dmispd dmicmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database...
CVE-2000-0032
Solaris dmicmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database...
Solaris 7.0 - DMI Denial of Service
source: https://www.securityfocus.com/bid/878/info DMI is the Desktop Management Interface, and is a suite of application management programs shipped with Sun's Solaris. Each application that is managed through DMI has a MIF record which contains information about its managable components and...
Sun Solaris 7.0 - rpc.ttdbserver Denial of Service
Sun Solaris 7.0 - rpc.ttdbserver Denial of Service // source: https://www.securityfocus.com/bid/811/info It is possible to crash rpc.ttdbserver by using the old tddbserver buffer overflow exploit. This problem is caused by a NULL pointer being dereferenced when rpc function 15 is called with...
CVE-1999-0188
The passwd command in Solaris can be subjected to a denial of service...
CVE-1999-0263
Solaris SUNWadmap can be exploited to obtain root access...