Solaris 8 (x86) : 109036-07

SunOS 5.8x86: useradd/userdel/usermod patch. Date this patch was last updated by Sun : Apr/01/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 109035-07

SunOS 5.8: useradd/userdel/usermod patch. Date this patch was last updated by Sun : Mar/30/11 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 146773-01

SunOS 5.10x86: CVE-2010-1168 - Safe.pm 2.. Date this patch was last updated by Sun : Mar/30/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2012/01/30. C Tenable Network Security, Inc. if !...

RealNetworks, Inc. Releases Update for Helix Server and Helix Mobile Server

RealNetworks, Inc. has released a security update for multiple vulnerabilities affecting Helix Server and Helix Mobile Server. The vulnerabilities affect versions 12.x, 13.x, and 14.x of Helix Server and Helix Mobile Server installed on Red Hat Enterprise Linux 5, Sun Solaris 10, Windows 2003, an...

Solaris 10 (sparc) : 146769-01

SunOS 5.10: CVE-2010-1168 - Safe.pm 2.24 a. Date this patch was last updated by Sun : Mar/30/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2012/01/30. C Tenable Network Security, Inc. if !...

Mandriva Update for java-1.6.0-openjdk MDVSA-2011:054 (java-1.6.0-openjdk)

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test Mandriva Update for java-1.6.0-openjdk MDVSA-2011:054 java-1.6.0-openjdk Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

BSD systems / Solaris port hijacking

User can open port with specified interface address if it's already open by another application without interface address...

Solaris 10 Port Stealing Vulnerability

I reported this to Oracle, but I have been told that this is part of the BSD standard and a desire feature !. In a nutshell, as an ordinary user, I can bind to a port using a specific address even if another process is already bound to it with a wildcard address. This makes it very easy for an...

Solaris 10 Port Stealing

I reported this to Oracle, but I have been told that this is part of the BSD standard and a desire feature !. In a nutshell, as an ordinary user, I can bind to a port using a specific address even if another process is already bound to it with a wildcard address. This makes it very easy for an...

EMC Data Protection Advisor Collector for Solaris SPARC不安全文件权限漏洞

Bugtraq ID: 47036 CVE ID：CVE-2011-1420 EMC Data Protection Advisor Collector是一款数据备份报告工具。 Solaris SPARC平台下的EMC Data Protection Advisor Collector不正确设置文件权限，本地攻击者可以利用漏洞以目标用户安全上下文执行任意代码，可导致特权提升。 EMC Data Protection Advisor Collector for Solaris SPARC 5.7.1 EMC Data Protection Advisor Collector for...

CVE-2011-1420

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

Code injection

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-1420

EMC Data Protection Advisor Collector for Solaris SPARC (version 5.7 and 5.7.1) contains incorrect/weak file permissions that allow a local attacker to execute code with elevated privileges. Affected builds 5.7 and 5.7.1 require Patch/DPA-8873; EMC notes that Build 5833 for both 5.7 and 5.7.1 res...

CVE-2011-1420

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

ESA-2011-010: EMC Data Protection Advisor Collector arbitrary code execution with elevated privileges vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-010: EMC Data Protection Advisor Collector arbitrary code execution with elevated privileges vulnerability EMC Identifier: ESA-2011-010 CVE Identifier: CVE-2011-1420 Severity Rating: CVSS v2 Base Score: 6.8 AV:L/AC:L/Au:S/C:C/I:C/A:C Affected...

FreeBSD : linux-flashplugin -- remote code execution vulnerability (501ee07a-5640-11e0-985a-001b2134ef46)

Adobe Product Security Incident Response Team reports : A critical vulnerability exists in Adobe Flash Player 10.2.152.33 and earlier versions Adobe Flash Player 10.2.154.18 and earlier for Chrome users for Windows, Macintosh, Linux and Solaris operating systems, Adobe Flash Player 10.1.106.16 an...

Solaris 10 (sparc) : 146857-01

SunOS 5.10: ssl patch for wanboot. Date this patch was last updated by Sun : Mar/23/11 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Adobe Pushes Critical Patch in Flash Player, Reader, Acrobat

Adobe said it is releasing security updates on Monday to address a critical vulnerability in Adobe Flash Player that is being exploited in the wild and could allow a remote attacker to take control of the affected system. The patch is a follow-up to a March 14 Security Advisory from the company...

Solaris 9 (x86) : 122717-02

SunOS 5.9x86: kernel/fs/lofs patch. Date this patch was last updated by Sun : Mar/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 122716-02

SunOS 5.9: kernel/fs/lofs patch. Date this patch was last updated by Sun : Mar/18/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...