Design/Logic Flaw

Vulnerability in the Oracle Solaris product of Oracle Systems component: Whodo. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2944

CVE-2020-2944 is a local privilege-escalation vulnerability in Oracle Solaris, affecting the Common Desktop Environment (CDE) component. A buffer overflow in sdtcm_convert allows a low-privileged user with logon to Solaris to gain root privileges when handling a malicious calendar file; the issue...

CVE-2020-2944

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2944

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2927

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2927

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2927

CVE-2020-2927 affects Oracle Solaris (Common Desktop Environment) on Solaris 10 and 11. It is a local-privilege vulnerability in the CDE component that can lead to takeover of Oracle Solaris; CVSS 3.0 base score 7.8 (HIGH). Oracle’s APR2020 CPU/SRU11 3.36.20.0 patch bundle includes this CVE, indi...

CVE-2020-2851

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2851

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2851

CVE-2020-2851 affects Oracle Solaris (Common Desktop Environment: libDtSvc) on Solaris 10 and 11. A stack-based buffer overflow in libDtSvc may allow a low-privilege local user to gain control of the system, potentially leading to takeover of Solaris and impact to other products. The vulnerabilit...

CVE-2020-2771

Vulnerability in the Oracle Solaris product of Oracle Systems component: Whodo. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2771

Vulnerability in the Oracle Solaris product of Oracle Systems component: Whodo. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2020-2771

CVE-2020-2771 affects Oracle Solaris 10 and 11, in the Whodo component. The issue is a heap-based buffer overflow in setuid root whodo and w binaries that can be triggered by a low-privileged user with logon access, with required human interaction, potentially allowing unauthorized read access to...

CVE-2020-2749

CVE-2020-2749 affects Oracle Solaris 11, specifically the SMF command svcbundle component. The vulnerability is local (LOCAL) with HIGH complexity and requires user interaction. It allows a low-privilege attacker with logon to compromise Solaris, risking unauthorized updates, inserts, or deletion...

CVE-2020-2749

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF command svcbundle. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2020-2749

Vulnerability in the Oracle Solaris product of Oracle Systems component: SMF command svcbundle. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

PT-2020-2639 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 and 11 Description: The issue is related to a lack of protection for service data in the Whodo component of Oracle Solaris. It allows a low-privileged attacker with logon access to the infrastructure where Oracle...

Solaris 10 (x86) : 119784-44

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Bind/Postinstall script for Bind package. The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component o...

Solaris 10 (sparc) : 143725-13

SunOS 5.10: SunFreeware ntp patch. Date this patch was last updated by Sun : Apr/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid135437; scriptversion"1.1";...

Solaris 10 (sparc) : 152643-08

SunOS 5.10: Apache 2.4 Patch. Date this patch was last updated by Sun : Apr/13/20 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid135439; scriptversion"1.1";...