CVE-2010-2400

CVE-2010-2400 is reported as an unspecified local vulnerability in Oracle Solaris 9/10 and OpenSolaris, affecting Kernel/Filesystem and hindering availability. The CVE entry is supported by Oracle’s July 2010 Critical Patch Update documentation, which lists Solaris kernel/Filesystem fixes among 5...

CVE-2010-2383

CVE-2010-2383 (Solaris/OpenSolaris NFS): Unspecified vulnerability in Solaris 8/9/10/OpenSolaris related to NFS that allows a local unprivileged user to affect confidentiality and integrity by abusing unsafe use of temporary files in nfslogd. The public disclosure shows an unprivileged user can c...

CVE-2010-2393

CVE-2010-2393 affects Oracle Solaris 10 and OpenSolaris. The connected Solaris entry identifies a local vulnerability tied to the kernel RPC subsystem that can impact availability. The advisory notes a local-exploit scenario (no remote access) and a high impact on availability, with no explicit e...

CVE-2010-2399

Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/VM...

CVE-2010-2382

CVE-2010-2382 (Solaris) affects Solaris 8/9/10 where the flar tool used for creating flash archives writes to insecure temporary files in /tmp with predictable names (e.g., .flash_filter_one_.$PID). An unprivileged user can pre-create symlinks to privileged targets, and when root runs flar, it ma...

CVE-2010-2384

CVE-2010-2384 affects Oracle Solaris 9/10. The Solaris wbem service, when enabled, runs SUNWrmui_reg.sh and can be abused by an unprivileged local user via unsafe handling of temporary files in /tmp, potentially impacting confidentiality and integrity. A full disclosure and patching guidance desc...

CVE-2010-2386

Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver...

CVE-2010-2374

CVE-2010-2374 affects Solaris Studio 12 Update 1. Description in sources indicates an unspecified local vulnerability that could affect confidentiality and integrity via unknown vectors, exploitable by a local user. The CVE entry is listed under Solaris Studio with fix/version note “12 update 1,”...

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to...

Oracle Solaris - nfslogd Insecure Temporary File Creation

Oracle Solaris - nfslogd Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41637/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected...

Oracle Solaris - rdist Privilege Escalation

Oracle Solaris - rdist Privilege Escalation source: https://www.securityfocus.com/bid/41612/info Oracle Solaris is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue wi...

Oracle Solaris - 'rdist' Privilege Escalation

source: https://www.securityfocus.com/bid/41612/info Oracle Solaris is prone to a local privilege-escalation vulnerability. Local attackers can exploit this issue to execute arbitrary code with superuser privileges. Successfully exploiting this issue will result in the complete compromise of...

Oracle Solaris Management Console - WBEM Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41642/info The 'Solaris Management Console' sub component of Oracle Solaris creates temporary files in an insecure manner. An attacker with local access can exploit this issue to overwrite arbitrary files. This may result in denial-of-service conditions o...

Oracle Solaris - 'nfslogd' Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41637/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service...

Oracle Solaris 8910 - flar Insecure Temporary File Creation

Oracle Solaris 8910 - flar Insecure Temporary File Creation source: https://www.securityfocus.com/bid/41619/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected...

Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation

source: https://www.securityfocus.com/bid/41619/info Oracle Solaris is prone to an insecure temporary file creation vulnerability. A local attacker can exploit this issue to overwrite arbitrary files with the privileges of the affected process. This will likely result in denial-of-service...

Sun Solaris sadmind - 'adm_build_path()' Remote Buffer Overflow (Metasploit)

$Id: sadmindadmbuildpath.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Zabbix Agent - 'net.tcp.listen' Command Injection (Metasploit)

$Id: zabbixagentexec.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

System V Derived /bin/login - Extraneous Arguments Buffer Overflow (Metasploit)

$Id: manyargs.rb 9669 2010-07-03 03:13:45Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent 3.1.7 and earlier on Windows, Snare Agent 1.5.0 and earlier on Linux and AIX, Snare Agent 1.4 and earlier on IRIX, Snare Epilog 1.5....