CVE-2017-3629

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3630

CVE-2017-3630 affects Oracle Solaris Kernel (Solaris 10/11). The issue is described as a Stack Clash due to an insufficiently sized stack guard page on unpatched Solaris, enabling a local user with logon to escalate privileges via RSH and compromise Solaris data integrity/readability or cause par...

CVE-2017-3629

CVE-2017-3629 affects the Solaris kernel in Oracle Sun Systems Products Suite, with patched/affected versions 10 and 11. The vulnerability is a local, kernel-level issue that enables a low-privilege user with logon to compromise Solaris, potentially leading to a full takeover of the system. Explo...

Oracle Solaris Local Elevation of Privilege Vulnerability (CNVD-2017-15709)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local elevation of privilege vulnerability exists in Oracle Solaris. A local attacker could exploit this issue to gain root privileges on an affected...

Oracle Sun Systems Products Suite Solaris Local Elevation of Privilege Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local lift vulnerability exists in the Kernel subcomponent of the Solaris component version 11 of the Oracle Sun Systems Products Suite. An attacker...

Solaris 11 : Multiple Kernel Vulnerabilities

The remote Solaris host is missing a vendor-supplied security patch. It is, therefore, affected by the following vulnerabilities : - Multiple security bypass vulnerabilities exist in the Kernel subcomponent that allow a specially crafted application to circumvent the stack guard page security...

Oracle Solaris Local Elevation of Privilege Vulnerability

Solaris was originally a Unix-like operating system developed by Sun Microsystems and became known as Oracle Solaris after Sun was acquired by Oracle. A local elevation of privilege vulnerability exists in Oracle Solaris, which can be exploited by a local attacker to gain root privileges on an...

VulnCheck KEV: CVE-2001-0236

Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event...

VulnCheck KEV: CVE-2017-3623

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

VulnCheck KEV: CVE-2017-3622

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment CDE. The supported version that is affected is 10. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes...

Visualizing the Stack Clash Vulnerability with Dashboards

Security teams should apply vendor patches immediately to protect their Linux, OpenBSD, NetBSD, FreeBSD and Solaris infrastructure from The Stack Clash vulnerability also see the security advisory. To help in that effort, this blog post describes a new built-in Qualys AssetView dashboard to...

Stack Clash Vulnerability in Linux, BSD Systems Enables Root Access

Linux, BSD, Solaris and other open source systems are vulnerable to a local privilege escalation vulnerability known as Stack Clash that allows an attacker to execute code at root. Major Linux and open source distributors have made patches available today, and systems running Linux, OpenBSD,...

Solaris RSH Stack Clash Privilege Escalation

This module exploits a vulnerability in RSH on unpatched Solaris systems which allows users to gain root privileges. The stack guard page on unpatched Solaris systems is of insufficient size to prevent collisions between the stack and heap memory, aka Stack Clash. This module uploads and executes...

openSUSE Security Update : lynis (openSUSE-2017-705)

This update for lynis fixes the following issues : Lynis 2.5.1 : - Improved detection of SSL certificate files - Minor changes to improve logging and results - Firewall tests: Determine if CSF is in testing mode The Update also includes changes from Lynis 2.5.0 : - CVE-2017-8108: symlink attack m...

[SECURITY] Fedora 26 Update: libtirpc-1.0.1-4.rc3.fc26

This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network Computing ONC, and is derived directly from the Solaris 2.3 source. TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V...

The vulnerability of the Remote Administration Daemon component of the Solaris operating system allows a perpetrator to gain access to read or modify data, thereby causing a partial service disruption.

The vulnerability of the Remote Administration Daemon component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain read, modify, add, or delete access to data, and cause partial service interruption...

The vulnerability of the Common Desktop Environment component of the Solaris operating system allows a hacker to gain privileged access to the infrastructure.

The vulnerability of the Common Desktop Environment component of the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious individual to gain privileged access to the infrastructure...

[SECURITY] Fedora 25 Update: libtirpc-1.0.1-4.rc3.fc25

This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network Computing ONC, and is derived directly from the Solaris 2.3 source. TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V...

The vulnerability of the Solaris operating system, which allows a malicious individual to compromise the confidentiality of information

The vulnerability of the Oracle Sun Systems Products Suite component sub-component Kernel RPC of the Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality of information through network...

Solaris 10 (sparc) : 152651-01 (deprecated)

GNOME 2.6.0: libgdk-x11-2.0.so patch. Date this patch was last updated by Sun : May/11/17 This plugin has been deprecated and either replaced with individual 152651 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled o...