CVE-2018-3270

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-3172

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: RPC. Supported versions that are affected are 10 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via Portmap v3 to compromise Solaris. Successful attacks of thi...

CVE-2018-2922

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2018-3267

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: LFTP. The supported version that is affected is 11.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via FTP to compromise Solaris. Successful attacks of this...

CVE-2018-3275

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: LibKMIP. The supported version that is affected is 11.3. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. Successful attack...

CVE-2018-3270

CVE-2018-3270 affects the Solaris component (Kernel) of Oracle Sun Systems Products Suite, specifically Solaris 11.3. The vulnerability allows a high-privilege attacker who has logon access to the infrastructure where Solaris runs to compromise the system. Exploitation requires human interaction ...

CVE-2018-3266

CVE-2018-3266 affects the Solaris component of Oracle Sun Systems Products Suite, subcomponent Verified Boot , for the supported version 11.3. The connected documents confirm a vulnerability where a high-privilege attacker with logon to the infrastructure where Solaris runs can compromise Solaris...

CVE-2018-3271

CVE-2018-3271 affects Oracle Solaris 11.3 in the Kernel Zones subcomponent. The vulnerability allows a high-privilege attacker who can log on to the Solaris-hosting infrastructure to cause a hang or frequent, complete DoS of Solaris (availability impact). The CVSS3.0 vector is LOCAL, with high at...

CVE-2018-3274

CVE-2018-3274 affects Oracle Solaris 11.3, specifically the Kernel subcomponent of the Solaris module in Oracle Sun Systems Products Suite. The vulnerability is exploitable via network access using SMB by a low-privileged attacker and requires user interaction from the target user. Successful exp...

CVE-2018-3265

CVE-2018-3265 affects the Solaris component of Oracle Sun Systems Products Suite, subcomponent Zones, version 11.3. The vulnerability is described as allowing an unauthenticated attacker with logon to the infrastructure where Solaris runs to compromise Solaris, with potential for unauthorized upd...

CVE-2018-3267

The CVE-2018-3267 issue affects Oracle Solaris 11.3 (Solaris component) in the LFTP subcomponent. An unauthenticated attacker with network access via FTP can read a subset of Solaris data, with CVSSv3.0 base impact Confidentiality Low and no other impacts. The connected sources confirm this is pa...

CVE-2018-3269

CVE-2018-3269 affects Oracle Solaris (Sun Systems Products Suite) under the Solaris component, subcomponent SMB Server (solaris 11.3). The vulnerability is exploitable by a low-privileged attacker over the network via SMB, potentially causing a partial denial of service to Solaris. The source doc...

Solaris 10 (x86) : 152925-01

JavaSE 7x86: update 201 patch equivalent to JDK 7u201. Date this patch was last updated by Sun : Oct/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid118139; scriptversion"1.4"...

Solaris 10 (x86) : 152921-11

JavaSE 6x86: update 211 patch equivalent to JDK 6u211. Date this patch was last updated by Sun : Oct/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid118137; scriptversion"1.4"...

Solaris 10 (x86) : 152101-91

JavaSE 8x86: update 191 patch equivalent. Date this patch was last updated by Sun : Oct/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid118135; scriptversion"1.4";...

Solaris 10 (sparc) : 152100-92

JavaSE 8: update 192 patch equivalent to. Date this patch was last updated by Sun : Oct/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid118130; scriptversion"1.6";...

Solaris 10 (x86) : 152926-01

JavaSE 7x86: update 201 patch equivalent to JDK 7u201, 64bit. Date this patch was last updated by Sun : Oct/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid118140;...

Solaris 10 (sparc) : 152919-11

JavaSE 6: update 211 patch equivalent to JDK 6u211. Date this patch was last updated by Sun : Oct/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid118131; scriptversion"1.4";...

Solaris 10 (sparc) : 152920-11

JavaSE 6: update 211 patch equivalent to JDK 6u211, 64bit. Date this patch was last updated by Sun : Oct/15/18 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid118132;...

Solaris - RSH Stack Clash Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris RSH Stack Clash Privilege Escalation', 'Description' = %q This module exploits a vulnerability in RSH on unpatched Solaris systems which...