CVE-2010-0895

Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv119 allows local users to affect integrity and availability via unknown vectors related to IP Filter...

CVE-2010-0889

The CVE-2010-0889 entry concerns an unspecified local confidentiality vulnerability in the Solaris/OpenSolaris kernel (snv_68–snv_128). Affected: Solaris/OpenSolaris components; attack scope and root cause remain under-specified. The linked references indicate Oracle CPU APR2010/CPUAPR2010-099504...

CVE-2010-0891

Unspecified vulnerability in the Sun Management Center component in Oracle Sun Product Suite 3.6.1 and 4.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Solaris Container Manager...

CVE-2010-0889

Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv68 through snv128 allows local users to affect confidentiality via unknown vectors related to the Kernel...

Sun Update with 16 Fixes Coming Next Week

Oracle has moved Solaris onto its quarterly security patch schedule, meaning users of the Sun Microsystems operating system will now know months in advance when they will be getting security updates. The next Critical Patch Update is due on Tuesday. The update will include 16 security fixes for S...

Samba 3.0.24 (Solaris) - 'lsa_io_trans_names' Heap Overflow (Metasploit)

$Id: lsatransnamesheap.rb 9021 2010-04-05 23:34:10Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framewor...

Solaris 9 (sparc) : 115695-06

SunOS 5.9: ldap library Patch. Date this patch was last updated by Sun : Sep/29/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 115696-06

SunOS 5.9x86: ldap library Patch. Date this patch was last updated by Sun : Sep/29/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16

Check for the Version of Sun XVR-300 Graphics Accelerator OpenVAS Vulnerability Test Solaris Update for Sun XVR-300 Graphics Accelerator 124149-16 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Solaris Update for kernel 142901-07

Check for the Version of kernel OpenVAS Vulnerability Test Solaris Update for kernel 142901-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for behavior 125555-07

Check for the Version of behavior OpenVAS Vulnerability Test Solaris Update for behavior 125555-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Solaris Update for behavior 125556-07

Check for the Version of behavior OpenVAS Vulnerability Test Solaris Update for behavior 125556-07 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

CVE-2010-1183

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...

Design/Logic Flaw

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...

CVE-2010-1183

The CVE-2010-1183 issue affects Oracle Solaris patch installation scripts used by Update Manager. A symlink vulnerability in a /tmp/CLEANUP file allows a local user to append data to arbitrary files, enabling local privilege escalation on x86 Solaris during patch updates. The Packet Storm entry d...

CVE-2010-1183

Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of Update Manager...

Oracle Java Runtime Environment 'HsbParser.getSoundBank()' Remote Heap Buffer Overflow Vulnerability

Description Oracle Java SE and Java for Business are prone to a remote heap-based buffer-overflow vulnerability affecting the Java Runtime Environment JRE. Attackers can exploit this issue to execute arbitrary code within the context of the user invoking the JRE. Versions prior to Java 5.0 Update...

Sun Solaris symbolic links vulnerability

Multiple symbolic links vulnerabilities on updates installation...

[security bulletin] HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center (PPMC), Remote Cross Site Scripting (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01762443 Version: 1 HPSBMA02436 SSRT080064 rev.1 - HP Project and Portfolio Management Center PPMC, Remote Cross Site Scripting XSS NOTICE: The information in this Security Bulletin should be act...

Symlink attack with Solaris Update manager and Sun Patch Cluster

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...