CVE-2024-21105

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2024-21105

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2024-21059

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

CVE-2024-21059

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

CVE-2024-20999

Vulnerability in the Oracle Solaris product of Oracle Systems component: Zones. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

CVE-2024-20999

Vulnerability in the Oracle Solaris product of Oracle Systems component: Zones. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

CVE-2024-21105

CVE-2024-21105 affects Oracle Solaris 11, specifically the Utility component. The advisory notes an easily exploitable, locally accessible vulnerability that can allow a privileged attacker with logon to read a subset of Oracle Solaris data. The issue is tied to the Utility component in Solaris 1...

CVE-2024-21059

Summary for CVE-2024-21059 (Oracle Solaris) : A vulnerability in Oracle Solaris (11.x) affecting the Solaris Utility component. The advisory states the vulnerability allows a low-privileged, local attacker with logon to the host to compromise Oracle Solaris, and that successful exploitation can l...

CVE-2024-20999

CVE-2024-20999 affects Oracle Solaris 11 (Zones component). Root cause described in multiple sources as insufficient input validation in Zones, enabling a high-privilege attacker with local access to compromise Oracle Solaris and potentially impact related products, up to takeover. Remediation is...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation USA. A security vulnerability exists in Oracle Systems' Oracle Solaris. An attacker has exploited this vulnerability to cause a takeover of Oracle Solaris...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in Oracle Systems' Oracle Solaris. An attacker could exploit this vulnerability to gain access to data...

PT-2024-4880 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient protection of sensitive data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to gain unauthorized access to protected...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation USA. A security vulnerability exists in Oracle Systems' Oracle Solaris. An attacker has exploited this vulnerability to cause a takeover of Oracle Solaris...

PT-2024-3525

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient access controls in the Utility component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise the system...

CVE-2024-21059: Improper Privilege Management

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

CVE-2024-21105: Integer Overflow or Wraparound

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2024-20999: Execution with Unnecessary Privileges

Vulnerability in the Oracle Solaris product of Oracle Systems component: Zones. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

Security Bulletin: IBM Sterling Connect:Direct FTP+ is vulnerable to various attacks due to IBM Runtime Environment Java Technology Edition Version 8

Summary IBM Java 8 is used by IBM Sterling Connect:Direct FTP+ on Solaris platform in product configuration and data transmission. IBM Sterling Connect:Direct FTP+ on Solaris platform is impacted by vulnerabilities in IBM Java 8. IBM Sterling Connect:Direct FTP+ on Solaris platform has upgraded I...

whoami stack buffer overflow on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...

GHSA-W5W5-8VFH-XCJQ whoami stack buffer overflow on several Unix platforms

With versions of the whoami crate = 0.5.3 and = 0.5.3 and 1.0.1, calling any of the above functions also leads to a stack buffer overflow on these platforms: - Bitrig - DragonFlyBSD - FreeBSD - NetBSD - OpenBSD This occurs because of an incorrect definition of the passwd struct on those platforms...