CVE-2012-3207

CVE-2012-3207 is a Solaris kernel vulnerability affecting Oracle SunOS/Solaris 9, 10, and 11. The connected documents specify an unspecified local-privilege/DoS-style issue in the Kernel that can allow a local attacker to affect availability (e.g., system hang or crash). Exploitation details are ...

CVE-2012-3203

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability, related to Gnome Display Manager GDM...

CVE-2012-3210

Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via unknown vectors related to Kernel...

CVE-2012-3204

Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management...

Solaris 10 (x86) : 127873-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, inse...

Solaris 10 (x86) : 137098-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: inetd1M. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or...

Solaris 10 (sparc) : 127872-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: mailx1. Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, inse...

Solaris 10 (sparc) : 137097-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: inetd1M. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or...

Solaris 10 (x86) : 149107-01 (deprecated)

SunOS 5.10x86: /usr/sfw/lib/gimp/2.0/plug. Date this patch was last updated by Sun : Oct/05/12 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/11/20. C Tenable Network Security, Inc. if !...

[security bulletin] HPSBMU02817 SSRT100950 rev.1 - HP Network Node Manager i (NNMi) for HP-UX, Linux, Solaris, and Windows, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03507708 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03507708 Version: 1 HPSBMU02817...

Solaris 10 (sparc) : 149453-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Install/smpatch. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, inser...

CA20121001-01: Security Notice for CA License

CA20121001-01: Security Notice for CA License Issued: October 01, 2012 CA Technologies Support is alerting customers to two potential risks in CA License also known as CA Licensing. Vulnerabilities exist that can allow a local attacker to execute arbitrary commands or gain elevated access. CA...

Solaris 10 (x86) : 149454-02 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Install/smpatch. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, inser...

OpenJDK: insecure temporary file permissions (JRE, 7143606)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux...

Solaris 10 (sparc) : 126546-10 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Bash. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful...

Code injection

The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service invalid address alignment exception and daemon crash via vectors involving a multiplexed channel...

CVE-2012-2199

The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service invalid address alignment exception and daemon crash via vectors involving a multiplexed channel...

CVE-2012-2199

The server message channel agent in the queue manager in the server in IBM WebSphere MQ 7.0.1 before 7.0.1.9, 7.1, and 7.5 on Solaris allows remote attackers to cause a denial of service invalid address alignment exception and daemon crash via vectors involving a multiplexed channel...

CVE-2012-2199

The CVE-2012-2199 entry concerns IBM WebSphere MQ 7.x on Solaris. The affected component is the server message channel agent in the queue manager, with vulnerable behavior occurring in versions 7.0.1 before 7.0.1.9, 7.1, and 7.5. The impact is a remote denial of service via a multiplexed channel,...

OpenJDK: insecure temporary file permissions (JRE, 7143606)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.237 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux...