Release Information for Veeam Agent for Oracle Solaris 2.0

Requirements Upgrade from v1 is not supported, clean installation is required. Upgrade from Veeam Agent for Solaris 2.0 RTM build 2.0.0.123 is possible. Please confirm that you are running version 2.0.0.123 or later prior to upgrading. You can check this using veeamconfig --version in Oracle...

Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Exploit

Title: Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Author: Marco Ivaldi Vendor: www.oracle.com CVE: CVE-2020-2944 / raptorsdtcmconv.c - CDE sdtcmconvert LPE for Solaris/Intel Copyright c 2019-2020 Marco Ivaldi A buffer overflow in the SanityCheck function in the...

Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation

Title: Oracle Solaris Common Desktop Environment 1.6 - Local Privilege Escalation Date: 2020-04-21 Author: Marco Ivaldi Vendor: www.oracle.com CVE: CVE-2020-2944 / raptorsdtcmconv.c - CDE sdtcmconvert LPE for Solaris/Intel Copyright c 2019-2020 Marco Ivaldi A buffer overflow in the SanityCheck...

Common Desktop Environment 1.6 Local Privilege Escalation Exploit

A buffer overflow in the SanityCheck function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 Update 11 and earlier allows local users to gain root privileges via a long calendar name or calendar owner passed to sdtcmconvert in a malicious calendar file. The open...

Oracle Solaris 11.x / 10 whodo / w Buffer Overflow Vulnerability

A difficult to exploit heap-based buffer overflow in setuid root whodo and w binaries distributed with Solaris allows local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges. Title: Heap-based buffer overflow in Solaris whodo and w commands Application...

Common Desktop Environment 2.3.1 / 1.6 libDtSvc Buffer Overflow Vulnerability

A difficult to exploit stack-based buffer overflow in the DtCreateDtDirs function in the Common Desktop Environment version distributed with Oracle Solaris 10 1/13 Update 11 and earlier may allow local users to corrupt memory and potentially execute arbitrary code in order to escalate privileges...

Common Desktop Environment 1.6 Local Privilege Escalation

@Mediaservice.net Security Advisory 2020-05 last updated on 2020-04-15 Title: Local privilege escalation via CDE sdtcmconvert Application: Common Desktop Environment 1.6 and earlier Platforms: Oracle Solaris 10 1/13 Update 11 and earlier Other platforms are potentially affected see below...

Common Desktop Environment 2.3.1 / 1.6 libDtSvc Buffer Overflow

@Mediaservice.net Security Advisory 2020-06 last updated on 2020-04-15 Title: Stack-based buffer overflow in CDE libDtSvc Application: Common Desktop Environment 2.3.1 and earlier Common Desktop Environment 1.6 and earlier2020-06-cde-libDtSvc.txt Platforms: Oracle Solaris 10 1/13 Update 11 and...

Oracle Solaris 11.x / 10 whodo / w Buffer Overflow

@Mediaservice.net Security Advisory 2020-07 last updated on 2020-04-15 Title: Heap-based buffer overflow in Solaris whodo and w commands Application: Setuid root whodo and w binaries distributed with Solaris Platforms: Oracle Solaris 11.x confirmed on 11.4 X86 Oracle Solaris 10 confirmed on 10 1/...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-26988)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the SMF command svcbundle component in Oracle Solaris 11. An attacker can exploit the vulnerability to update, insert, or delete access to certain Oracle Solaris data...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-26989)

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in the Common Desktop Environment component of Solaris versions 10 and 11 in Oracle Systems. An attacker could exploit this vulnerability to compromise Solaris, affecting the availability, confidentiality, and...

Unspecified Vulnerability in Oracle Systems Solaris (CNVD-2020-24432)

Oracle Systems Solaris is an Oracle MySQL server product from Oracle Corporation. A security vulnerability exists in Oracle Systems Solaris, which can be exploited by attackers to compromise the availability, confidentiality, and integrity of data by taking control of Solaris...

Oracle Solaris Unauthorized Read Vulnerability (CNVD-2020-25796)

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in the Whodo component of Solaris versions 10 and 11 in Oracle Systems. An attacker could exploit the vulnerability to gain unauthorized access to data, compromising the confidentiality of the data...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-29609)

Oracle Solaris is a UNIX operating system from Oracle. An unspecified vulnerability exists in Oracle Solaris. An attacker could exploit this vulnerability to compromise Solaris, affecting the availability, confidentiality, and integrity of data...

Oracle Solaris Critical Patch Update : apr2020_SRU11_4_15_5_0

This Solaris system is missing necessary patches to address a critical security update : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Whodo. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with log...

Oracle Solaris Critical Patch Update : apr2020_SRU11_3_36_20_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileg...

Oracle Solaris Critical Patch Update : apr2020_SRU11_4_19_3_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Sun ZFS Storage Appliance Kit product of Oracle Systems component: Operating System Image. The supported version that is affected is 8.8. Difficult to exploit vulnerability allows low...

CVE-2020-2944

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2944

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...

CVE-2020-2927

Vulnerability in the Oracle Solaris product of Oracle Systems component: Common Desktop Environment. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise...