Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade...

Code injection

Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver...

Oracle Solaris su NULL Pointer

From http://cvs.opensolaris.org/source/xref/onnv/onnv-gate/usr/src/cmd/su/su.c 521 for j = 0; initenvj != 0; j++ 1 522 if initvar = getenvinitenvj 2 ... 535 else 536 var = char 537 mallocstrleninitenvj 3 538 + strleninitvar 539 + 2; 540 void strcpyvar, initenvj; 4 'su' when creating new environme...

Oracle Solaris CVE-2010-3503 'su' Local Solaris Vulnerability

Exploit for solaris platform in category local exploits ============================================================= Oracle Solaris CVE-2010-3503 'su' Local Solaris Vulnerability ============================================================= 521 for j = 0; initenvj != 0; j++ 1 522 if initvar =...

CVE-2010-3508

Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones...

CVE-2010-3515

Unspecified vulnerability in the Solaris component in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to Kernel/Disk Driver...

CVE-2010-3516

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to InfiniBand...

CVE-2010-3517

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86...

CVE-2010-3503

Oracle Solaris 10/OpenSolaris local vulnerability CVE-2010-3503 resides in the su command: when inheriting environment variables, a malloc() may return NULL, and a subsequent strcpy() can dereference it, causing a crash (segmentation fault). Public sources (e.g., exploit/packetstorm references) d...

CVE-2010-3509

CVE-2010-3509 corresponds to a Solaris rpc.cmsd vulnerability diagnosed as an integer overflow in the rpc.cmsd service on Solaris 8/9/10. The issue allows a remote attacker to trigger a crash or execute arbitrary code with root privileges by sending a crafted RPC request, potentially leading to d...

CVE-2010-3507

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Live Upgrade...

CVE-2010-3515

CVE-2010-3515 affects Solaris/OpenSolaris kernels: Solaris 9/10 and OpenSolaris, in the Kernel/Disk Driver. The vulnerability is described as unspecified in the Solaris component, with local access required for exploit and potential impact on availability. The Oracle Oct 2010 CPU advisory and rel...

CVE-2010-3508

CVE-2010-3508 is an Oracle Solaris 10 local vulnerability in Solaris Zones that can affect confidentiality and integrity via unknown vectors. The CVSS v2 base score is 3.2 (LOCAL, Low/Partial impacts). Oracle’s October 2010 CPU advisory lists this CVE among patches; remediation is to apply the CP...

CVE-2010-3513

Unspecified vulnerability in Oracle Solaris 9 and 10, and OpenSolaris, allows local users to affect integrity and availability via unknown vectors related to Device Drivers...

CVE-2010-3513

CVE-2010-3513 affects Solaris 9/10 and OpenSolaris; vulnerability in Device Drivers allows local attackers to impact integrity and availability . CVSS v2 base score: 2.4 (LOW) , with local access and high complexity. The provided documents do not specify exploit details or a patch version; consul...

CVE-2010-3503

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect confidentiality and integrity via unknown vectors related to su...

CVE-2010-3517

CVE-2010-3517 is described as an unspecified local vulnerability affecting Oracle Solaris 10 and OpenSolaris, related to the kernel on x86. The connected documents confirm the vulnerability is located in the Solaris kernel/X86 component and is locally exploitable with the goal of impacting availa...

CVE-2010-3516

CVE-2010-3516 pertains to Oracle Solaris/OpenSolaris uDAPL/InfiniBand. The vulnerability is local to the system (local user required) and can affect availability via InfiniBand-related vectors. Connected docs confirm a Solaris InfiniBand issue (uDAPL) with local access and no remote exploitation ...

CVE-2010-3509

Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scheduler...

CVE-2010-3507

CVE-2010-3507 is associated with Solaris Live Upgrade. The connected Oracle Sun Products entry lists CVE-2010-3507 under Solaris with the Live Upgrade component, showing local access required (Local), and impacts on Confidentiality, Integrity, and Availability (Partial/Complete). The vulnerabilit...