Solaris 8 dtspcd - Heap Overflow

No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...

Sun Solaris Telnet Remote Authentication Bypass Vulnerability

No description provided by source. $Id: fuser.rb 9583 2010-06-22 19:11:05Z todb $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apache 1.x/2.0.x Chunked-Encoding Memory Corruption Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/5033/info When processing requests coded with the 'Chunked Encoding' mechanism, Apache fails to properly calculate required buffer sizes. This is believed to be due to improper signed interpretation of an unsigned integer...

Solaris 2.6/7.0 DTMail Mail Environment Variable Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3081/info dtmail is an application included with the Common Desktop Environment, one of the X Window Managers included with Solaris. A buffer overflow in dtmail makes it possible for a local user to gain elevated...

Solaris 2.6 FTP Core Dump Shadow Password Recovery Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2601/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying...

Sun Solaris sadmind adm_build_path() Buffer Overflow

No description provided by source. $Id: sadmindadmbuildpath.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms...

Common Desktop Environment <= 2.1 20,Solaris <= 7.0 dtspcd Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/636/info This explanation is quoted from the initial post on this problem by Job De Hass. This message is available in its entirety in the 'Credit' section of this vulnerability entry. The CDE subprocess daemon...

Solaris 2.6/7.0 IN.FTPD CWD Username Enumeration Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2564/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is a versatile operating system designed for use with machines as small as desktop systems and as large as enterprise...

PHP XML-RPC Arbitrary Code Execution

No description provided by source. $Id: phpxmlrpceval.rb 9929 2010-07-25 21:37:54Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Zabbix Agent < 1.6.7 - Remote Bypass Vulnerability

No description provided by source. Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob nicob nicob net Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers...

Solaris 2.7 / 2.8 Catman - Local Insecure tmp Symlink Exploit

No description provided by source. !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to create a block of symlinks to the...

Sun Solaris <= 7.0 sdtcm_convert Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/166/info Sdtcmconvert is a setuid-root data conversion utility which converts OpenWindows version 3 calendar data files to version 4 and vice versa. A buffer overflow condition has been found in sdtcmconvert which may be...

SGI IRIX <= 6.5.4,Solaris <= 2.5.1 ps(1) Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/220/info The ps command prints information about active processes on a system. Due to insufficient bounds checking on arguments supplied to ps, it is possible to overwrite the internal data space of the ps program. As ps ...

Solaris 2.5/2.5.1/2.6/7.0 sadmind Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distribut...

Solaris <= 2.5.1 kcms Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/452/info There is an unchecked sprintf call in the versions of /usr/openwin/bin/kcmsconfigure shipped with solaris 2.5, 2.5.1 and 2.6. Unfortunately, kcmsconfigure is installed setuid root, making it possible for an...

Solaris 2.6/7.0 lpset -r Buffer Overflow Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/1138/info A vulnerability exists in the handling of the -r option to the lpset program, as included in Solaris 7 from Sun Microsystems. The -r option is undocumented. As such, its use in unknown. However, when supplied a...

Multiple Vendors libc/glob(3) Resource Exhaustion (+0day remote ftpd-anon)

No description provided by source. Source: http://securityreason.com/securityalert/7822 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Vendors libc/glob3 resource exhaustion +0day remote ftpd-anon Author: Maksymilian Arciemowicz http://netbsd.org/donations/ http://securityreason.com/...

ManTrap 1.6.1 Hidden Process Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1908/info ManTrap is a honeypot intrusion detection system designed to lure attackers into it for analysis. The honeypot is implemented as a chroot'ed Solaris environment, designed to look and feel real to an attacker who...

IBM solidDB <= 6.5.0.3 - Denial of Service Vulnerability

No description provided by source. Source: http://aluigi.org/adv/soliddb1-adv.txt Luigi Auriemma Application: IBM solidDB http://www-01.ibm.com/software/data/soliddb/ Versions: = 6.5.0.3 Platforms: AIX, Linux, Solaris, Windows Bug: Denial of Service Exploitation: remote, versus server Date: 15 Oc...

Solaris 7.0 /usr/bin/mail -m Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/672/info A buffer overflow vulnerability in the '/usr/bin/mail' program's handling of the '-m' command line argument allows local users to obtain access to the 'mail' group. / Generic Solaris x86 exploit program by Brock...