CVE-2010-4446

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand...

CVE-2010-4459

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to SCTP and Kernel/sockfs...

CVE-2010-4435

CVE-2010-4435 concerns a memory corruption/remote code execution vulnerability in the CMSD (Calendar Manager Service Daemon) RPC service used by calendar managers on multiple vendors. Connected documents confirm that the flaw exists in the CMSD handling of RPC requests (notably large XDR-encoded ...

CVE-2010-4459

Technical details for CVE-2010-4459 are not publicly available in the provided documents; no affected product/version or root cause is specified here. Monitor for updates.

Code injection

Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libc...

CVE-2010-4443

The CVE-2010-4443 entry relates to an unspecified local vulnerability in Oracle Solaris 10 and 11 Express, related to Kernel/NFS, affecting availability. Affected component: Solaris kernel/NFS path. Root cause details are not provided in the documents. Exploitation status and concrete mitigations...

CVE-2010-4433

CVE-2010-4433 affects Oracle Solaris 10, with a vulnerability in the Ethernet/Driver sub-component that could allow remote attackers to compromise confidentiality. The impact is partial confidentiality compromise via network access; details on the exact vectors, root cause, or exploitable conditi...

CVE-2010-4460

CVE-2010-4460: The provided documents indicate an unspecified local privilege issue in Oracle Solaris 10 related to the Fault Manager Daemon, impacting confidentiality and integrity. Affected product is Solaris 10; exploit vectors, specific vulnerable components, or patch/version details are not ...

CVE-2010-4457

Technical details for CVE-2010-4457 are not publicly available in the provided documents. The entries only note an unspecified Solaris 11 Express vulnerability related to SMB/CIFS. Monitor for updated advisories or vendor advisories for specifics and fixes.

CVE-2010-4446

Oracle Solaris 11 Express is listed as affected by CVE-2010-4446, with the vulnerability in the RDS and Kernel/InfiniBand subsystems that can allow local users to impact availability via unknown vectors. The CVE entry references an Oracle CPU advisory (CPU Jan-2011) that contains patches for mult...

CVE-2010-4435

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability, related to CDE Calendar Manager Service Daemon and RPC. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claim...

CVE-2010-4458

Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS...

CVE-2010-4442

Technical details for CVE-2010-4442 are not publicly provided in the supplied documents; no affected product/version or root cause is specified. Monitor for updates.

CVE-2010-4433

Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via unknown vectors related to Ethernet and the Driver sub-component...

CVE-2010-4443

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS...

CVE-2010-4442

Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel...

CVE-2010-4460

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Fault Manager Daemon...

CVE-2010-4457

Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS...

CVE-2010-4458

Technical details for CVE-2010-4458 are not publicly available in the provided documents. The vulnerability is described only at a high level (local availability related to ZFS on Oracle Solaris 11 Express) with no concrete exploit or remediation details.