Solaris 10 (x86) : 147794-23

SunOS 5.10x86: Kerberos patch. Date this patch was last updated by Sun : Apr/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid124078; scriptversion"1.2"; scriptcvsdate"Date:...

Solaris 10 (x86) : 143726-12

SunOS 5.10x86: SunFreeware ntp patch. Date this patch was last updated by Sun : Apr/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid124077; scriptversion"1.2";...

Solaris 10 (sparc) : 151912-14

SunOS 5.10: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Apr/15/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid124076; scriptversion"1.2"; scriptcvsdate"Date:...

Security Bulletin: IBM Spectrum Protect Client Web Interface is vulnerable to a clickjacking attack (CVE-2018-1853)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client Web interface is vulnerable to a clickjacking attack that could allow a remote attacker to hijack the clicking action of the victim. Vulnerability Details CVEID: CVE-2018-1853 DESCRIPTION: IBM Tivoli Storage...

Oracle Weblogic Server Deserialization RCE - Raw Object (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/exploit/powershell' class MetasploitModule 'Oracle Weblogic Server Deserialization RCE - Raw Object', 'Description' = %q An unauthenticated attacker wi...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Tivoli Netcool Performance Manager (CVE-2019-2426, CVE-2018-12547, CVE-2018-1890)

Summary WebSphere Application Server is shipped with Tivoli Netcool Performance Manager. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fix...

Solaris kernel DoS

The vulnerability of the Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause service failures...

SMB Server DoS

The vulnerability of the SMB Server component of the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using the SMB protocol...

Oracle Solaris Kernel Zones DoS

The vulnerability of the Kernel Zones component of the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to cause service interruptions...

LFTP Oracle Solaris Unauthorized Access

The vulnerability of the LFTP component in the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to data using the FTP protocol...

Oracle Solaris Zones Privilege Escalation

The vulnerability of the Oracle Solaris operating system’s Zones component is related to insufficient access control. Exploiting this vulnerability can allow an attacker to gain access to protected information, modify file access rights, or cause service interruptions...

Oracle Solaris RPC DoS

The vulnerability of the RPC component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service failures using the Portmap v3 service...

Sudo Oracle Solaris Privilege Escalation

The vulnerability of the Sudo component in the Oracle Solaris operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker, working remotely, to gain access to protected information...

Solaris kernel DoS

The vulnerability of the Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause service failures using the SMB protocol...

Oracle Solaris Kernel Zones Virtualized NIC Driver Information Disclosure

The vulnerability of the Kernel Zones Virtualized NIC Driver component in the Oracle Solaris operating system is related to insufficient access control. Exploiting this vulnerability could allow an attacker to gain access to protected information remotely...

Samba < 2.2.8a Remote Code Execution Vulnerability

The version of Samba running on the remote host is prior to 2.2.8a. It is, therefore, affected by a remote code execution vulnerability in the SMB/CIFS packet fragment re-assembly code in smbd. An unauthenticated, remote attacker can exploit this to inject binary specific exploit code into smbd a...

Solaris pfexec Upgrade Shell

This module attempts to upgrade a shell session to UID 0 using pfexec. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris pfexec Upgrade Shell', 'Description' = %q This module attempts to...

LibKMIP Oracle Solaris Access Disclosure

The vulnerability of the LibKMIP component in the Oracle Solaris operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to gain access to protected information...

Oracle Solaris DHCP Client Full Control

The vulnerability of the DHCP Client component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to gain full control over the application using the DHCP protocol...

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using the TCP protocol...