Solaris 10 (x86) : 119784-45

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...

Solaris 10 (sparc) : 151912-16

SunOS 5.10: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Jul/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid138423; scriptversion"1.1";...

Solaris 10 (x86) : 151913-16

SunOS 5.10x86: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Jul/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid138429; scriptversion"1.1";...

Security Bulletin: A vulnerability in the IBM Java Runtime affects IBM Rational ClearQuest (CVE-2020-2654)

Summary There is a vulnerability in the IBM® Runtime Environment Java™ Versions 7 and 8, which are used by IBM Rational ClearQuest. This issue was disclosed as part of the IBM Java SDK updates in January 2020 deferred from Oracle Jan 2020 CPU. Vulnerability Details CVEID: CVE-2020-2654 DESCRIPTIO...

The vulnerability of the svcbundle component of the Oracle Solaris operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the svcbundle component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, working remotely, to gain unauthorized access to protected information...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Whodo component in the Oracle Solaris operating system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Whodo component in the Oracle Solaris operating system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to gain full control over the application.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system, which allows a hacker to perform arbitrary actions.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to perform arbitrary actions...

Release Information for Veeam Agent for Oracle Solaris 2.0

Requirements Upgrade from v1 is not supported, clean installation is required. Upgrade from Veeam Agent for Solaris 2.0 RTM build 2.0.0.123 is possible. Please confirm that you are running version 2.0.0.123 or later prior to upgrading. You can check this using veeamconfig --version in Oracle...

Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Exploit

Title: Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Author: Marco Ivaldi Vendor: www.oracle.com CVE: CVE-2020-2944 / raptorsdtcmconv.c - CDE sdtcmconvert LPE for Solaris/Intel Copyright c 2019-2020 Marco Ivaldi A buffer overflow in the SanityCheck function in the...

Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation

Title: Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Date: 2020-04-21 Author: Marco Ivaldi Vendor: www.oracle.com CVE: CVE-2020-2944 / raptorsdtcmconv.c - CDE sdtcmconvert LPE for Solaris/Intel Copyright c 2019-2020 Marco Ivaldi A buffer overflow in the SanityCheck...

Common Desktop Environment 1.6 Local Privilege Escalation Exploit

A buffer overflow in the SanityCheck function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 Update 11 and earlier allows local users to gain root privileges via a long calendar name or calendar owner passed to sdtcmconvert in a malicious calendar file. The open...

Oracle Solaris 11.x / 10 whodo / w Buffer Overflow Vulnerability

A difficult to exploit heap-based buffer overflow in setuid root whodo and w binaries distributed with Solaris allows local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges. Title: Heap-based buffer overflow in Solaris whodo and w commands Application...

Common Desktop Environment 2.3.1 / 1.6 libDtSvc Buffer Overflow Vulnerability

A difficult to exploit stack-based buffer overflow in the DtCreateDtDirs function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 Update 11 and earlier may allow local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges...

Common Desktop Environment 1.6 Local Privilege Escalation

@Mediaservice.net Security Advisory 2020-05 last updated on 2020-04-15 Title: Local privilege escalation via CDE sdtcmconvert Application: Common Desktop Environment 1.6 and earlier Platforms: Oracle Solaris 10 1/13 Update 11 and earlier Other platforms are potentially affected see below...

Oracle Solaris 11.x / 10 whodo / w Buffer Overflow

@Mediaservice.net Security Advisory 2020-07 last updated on 2020-04-15 Title: Heap-based buffer overflow in Solaris whodo and w commands Application: Setuid root whodo and w binaries distributed with Solaris Platforms: Oracle Solaris 11.x confirmed on 11.4 X86 Oracle Solaris 10 confirmed on 10 1/...

Common Desktop Environment 2.3.1 / 1.6 libDtSvc Buffer Overflow

@Mediaservice.net Security Advisory 2020-06 last updated on 2020-04-15 Title: Stack-based buffer overflow in CDE libDtSvc Application: Common Desktop Environment 2.3.1 and earlier Common Desktop Environment 1.6 and earlier2020-06-cde-libDtSvc.txt Platforms: Oracle Solaris 10 1/13 Update 11 and...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-26989)

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in the Common Desktop Environment component of Solaris versions 10 and 11 in Oracle Systems. An attacker could exploit this vulnerability to compromise Solaris, affecting the availability, confidentiality, and...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-26988)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the SMF command svcbundle component in Oracle Solaris 11. An attacker can exploit the vulnerability to update, insert, or delete access to certain Oracle Solaris data...