Solaris <= 10 sysinfo() Local Kernel Memory Disclosure Exploit

No description provided by source. / Sun Microsystems Solaris sysinfo Kernel Memory Disclosure exploit =================================================================== Local exploitation of an integer overflow vulnerability in Sun Microsystems Inc. Solaris allows attackers to read kernel memor...

Solaris 2.5/2.5.1/2.6/7.0 sadmind Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/866/info Certain versions of Solaris ship with a version of sadmind which is vulnerable to a remotely exploitable buffer overflow attack. sadmind is the daemon used by Solstice AdminSuite applications to perform distribut...

X11R6 <= 6.4 XKEYBOARD - Local Buffer Overflow Exploit (solaris/x86)

No description provided by source. / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security [email protected], / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security [email protected], Ramon de Carvalho Valle...

HP OpenView Network Node Manager <= 7.53 Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: HP OpenView Network Node Manager http://www.openview.hp.com/products/nnm/ Versions: = 7.53 Platforms: Windows tested, Solaris, Linux, HP-UX Bugs: A CGIs directory traversal B Denial of Service in ovalarmsrv C NULL pointer in ovalarmsr...

Solaris 2.x/7.0/8 catman Race Condition Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2149/info catman is a utility for creating preformatted man pages, distributed as part of the Solaris Operating Environment. A problem exists which could allow local users to overwrite or corrupt files owned by other user...

Sun Solaris 8/9 UCB/PS Command Local Information Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19662/info Sun Solaris is prone to a local information-disclosure vulnerability. This issue allows local attackers to gain access to potentially sensitive information that may aid them in further attacks. The following...

Solaris 7.0 kcms_configure

No description provided by source. source: http://www.securityfocus.com/bid/831/info The binary kcmsconfigure, part of the Kodak Color Management System package shipped with OpenWindows and ultimately, Solaris is vulnerable to a local buffer overflow. The buffer which the contents of the...

Cisco VPN 5000 Client Buffer Overrun Vulnerabilities (2)

No description provided by source. source: http://www.securityfocus.com/bid/5734/info Buffer overrun vulnerabilities have been reported in the Cisco VPN 5000 UNIX clients available for Linux and Solaris systems. The condition affects the binaries 'closetunnel' and 'opentunnel', both installed...

EMC NetWorker <= 7.6 sp3 Denial of Service

No description provided by source. Luigi Auriemma Application: EMC NetWorker Legato http://www.emc.com/backup-and-recovery/networker/networker.htm Versions: = 7.6 sp3 7.6.3.2 Build 860 Platforms: AIX, HP-UX, Linux, Solaris, Windows Bug: invalid read access Exploitation: remote Date: 14 Mar 2012...

Solaris 8/9/10 - fifofs I_PEEK Local Kernel Memory Leak Exploit

No description provided by source. / $Id: raptorpeek.c,v 1.1 2007/10/18 08:09:02 raptor Exp $ raptorpeek.c - Solaris fifofs IPEEK kernel memory leak Copyright c 2007 Marco Ivaldi [email protected] Lame integer signedness error in FIFO filesystems named pipes on Sun Solaris 8 through 10 allow...

Solaris 2.5.1/2.6/7/8 rlogin /bin/login - Buffer Overflow Exploit (SPARC)

No description provided by source. / $Id: raptorrlogin.c,v 1.1 2004/12/04 14:44:38 raptor Exp $ raptorrlogin.c - rlogin, Solaris/SPARC 2.5.1/2.6/7/8 Copyright c 2004 Marco Ivaldi [email protected] Buffer overflow in login in various System V based operating systems allows remote attackers to...

Solaris/SPARC 2.5.1/2.6/7/8 Derived 'login' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions...

Solaris 2.6/7.0 lp -d Option Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1143/info A buffer overrun has been discovered in the lp program, as included with Sun's Solaris 7 operating system. By passing well crafted, machine executable code of sufficient length to the -d option of lp, it becomes...

Solaris 2.x/7.0/8 lpd Remote Command Execution Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3274/info The print protocol daemon, 'in.lpd' or 'lpd', shipped with Solaris may allow for remote attackers to execute arbitrary commands on target hosts with superuser privileges. The alleged vulnerability is not the...

Solaris 2.x/7.0/8 Derived 'login' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions...

Solaris <= 2.5.1 Ping Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/209/info The ping program is used to assess network connectivity between network devices. A denial of service condition exists in the ping program that may cause the system to panic by sending ping requests to a multicast...

Solaris <= 7.0 Coredump Vulnerbility

No description provided by source. source: http://www.securityfocus.com/bid/296/info There is a vulnerability in the way Solaris 2.4 pre Jumbo Kernel Patch -35 for SPARC dumps core files. Under normal operation the operating system writes out a core image of a process when it is terminated due to...

Solaris 2.5/2.6/7.0/8 mailx -F Buffer Overflow Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/2610/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying...

Solaris 7.0 DMI Denial of Service Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/878/info DMI is the Desktop Management Interface, and is a suite of application management programs shipped with Sun's Solaris. Each application that is managed through DMI has a MIF record which contains information abou...

Sun Solaris 2.6/7.0/8 XSun Color Database File Heap Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/4408/info Solaris is the freely available Unix operating system distributed by Sun Microsystems. It may be possible for a local user to gain elevated privileges. When Xsun is executed, and an excessively long argument is...