Ansible: vulnerability in solaris_zone module via crafted solaris zone

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

Ansible: vulnerability in solaris_zone module via crafted solaris zone

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

Common Desktop Environment 2.3.1 Buffer Overflow Exploit

A buffer overflow in the CheckMonitor function in the Common Desktop Environment 2.3.1 and earlier and 1.6 and earlier, as distributed with Oracle Solaris 10 1/13 Update 11 and earlier, allows local users to gain root privileges via a long palette name passed to dtsession in a malicious .Xdefault...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07310)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel component in Oracle Solaris 10, 11. An attacker could exploit this vulnerability to affect availability...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-03245)

Oracle Solaris is a Unix-like operating system. An unspecified vulnerability exists in the X Window System component of Oracle Solaris 10 and 11. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07309)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel component of Oracle Solaris 11. An attacker could exploit this vulnerability to cause a partial denial of service partial DOS of Oracle Solaris...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-03244)

Oracle Solaris is a Unix-like operating system. An unspecified vulnerability exists in the Filesystem component of Oracle Solaris 11. An attacker could exploit this vulnerability to compromise confidentiality and integrity...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07308)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Kernel component of Oracle Solaris 11. An attacker could exploit this vulnerability to cause a partial denial of service partial DOS of Oracle Solaris...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07312)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Consolidation Infrastructure component of Oracle Solaris 11. An attacker could exploit this vulnerability to compromise confidentiality, integrity, and availability...

Unspecified Vulnerability in Oracle VM Server for SPARC

Oracle VM Server for SPARC integrates with SPARC servers and Oracle Solaris to increase flexibility, isolate workload processing, and maximize server utilization. An unspecified vulnerability exists in Oracle VM Server for SPARC. An attacker could exploit this vulnerability to compromise integrit...

Solaris xlock Information Disclosure

@Mediaservice.net Security Advisory 2020-01 last updated on 2020-01-15 Title: Low impact information disclosure via Solaris xlock Application: Setuid root xlock binary distributed with Solaris Platforms: Oracle Solaris 11.x confirmed on 11.4 X86 Oracle Solaris 10 confirmed on 10 1/13 X86...

Common Desktop Environment 2.3.1 Buffer Overflow

@Mediaservice.net Security Advisory 2020-02 last updated on 2020-01-15 Title: Local privilege escalation via CDE dtsession Application: Common Desktop Environment 2.3.1 and earlier Common Desktop Environment 1.6 and earlier Platforms: Oracle Solaris 10 1/13 Update 11 and earlier Other platforms a...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07311)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Common Desktop Environment component of Oracle Solaris 10. An attacker could exploit this vulnerability to compromise confidentiality, integrity, and availability...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07313)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Filesystem component of Oracle Solaris 11. An attacker could exploit this vulnerability to cause Oracle Solaris to hang or crash frequently and repeatedly full DOS...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-07307)

Oracle Solaris is a Unix-like operating system. A security vulnerability exists in the Filesystem component of Oracle Solaris 11. An attacker can exploit this vulnerability to cause Oracle Solaris to hang or crash frequently and repeatedly full DOS...

Unspecified Vulnerability in Oracle Solaris (CNVD-2020-03246)

Oracle Solaris is a Unix-like operating system. An unspecified vulnerability exists in the SMB Server component of Oracle Solaris 11. An attacker could exploit this vulnerability to compromise integrity...

SunOS 5.10 Generic_147148-26 - Local Privilege Escalation Exploit

Exploit: SunOS 5.10 Generic147148-26 - Local Privilege Escalation Date: 2020-01-15 Author: Marco Ivaldi Vendor: www.oracle.com Software Link: https://www.oracle.com/technetwork/server-storage/solaris10/downloads/latest-release/index.html CVE: CVE-2020-2696 / raptordtsessionipa.c - CDE dtsession L...

SunOS 5.10 Generic_147148-26 - Local Privilege Escalation

Exploit: SunOS 5.10 Generic147148-26 - Local Privilege Escalation Date: 2020-01-15 Author: Marco Ivaldi Vendor: www.oracle.com Software Link: https://www.oracle.com/technetwork/server-storage/solaris10/downloads/latest-release/index.html CVE: CVE-2020-2696 / raptordtsessionipa.c - CDE dtsession L...

Oracle Solaris Critical Patch Update : jan2020_SRU11_4_16_4_0

This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the Oracle Solaris product of Oracle Systems component: Kernel. The supported version that is affected is 11. Easily exploitable vulnerability allows unauthenticated attacker with network...

SunOS 5.10 Generic_147148-26 - Local Privilege Escalation

SunOS 5.10 Generic147148-26 - Local Privilege Escalation Exploit: SunOS 5.10 Generic147148-26 - Local Privilege Escalation Date: 2020-01-15 Author: Marco Ivaldi Vendor: www.oracle.com Software Link: https://www.oracle.com/technetwork/server-storage/solaris10/downloads/latest-release/index.html CV...