Solaris Update manager and Sun Patch Cluster symlink vulnerability

Exploit for solaris platform in category local exploits ================================================================== Solaris Update manager and Sun Patch Cluster symlink vulnerability ================================================================== Symlink attack with Solaris Update manag...

Solaris Update Manager / Sun Patch Cluster Symlink Attack

Symlink attack with Solaris Update manager and Sun Patch Cluster Larry W. Cashdollar Vapid Labs http://vapid.dhs.org 1/24/2010 With the GUI Sun Update Manager being used to install patches on a system local users can easily run scripts and create symlinks in an attempt to clobber files and...

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities

source: https://www.securityfocus.com/bid/38928/info Sun Connection Update Manager for Solaris creates temporary files in an insecure manner. An attacker with local access could potentially exploit these issues to perform symbolic-link attacks, overwriting arbitrary files in the context of the...

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities

Sun Connection Update Manager for Solaris - Multiple Insecure Temporary File Creation Vulnerabilities source: https://www.securityfocus.com/bid/38928/info Sun Connection Update Manager for Solaris creates temporary files in an insecure manner. An attacker with local access could potentially explo...

Solaris 10 (sparc) : 144106-01 (deprecated)

SunOS 5.10: usr/lib/nfs/nfslogd patch. Date this patch was last updated by Sun : Mar/19/10 This plugin has been deprecated and either replaced with individual 144106 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 9 (x86) : 125327-03

SunOS 5.9x86: wget patch. Date this patch was last updated by Sun : Apr/15/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris Update for igb driver 143909-03

Check for the Version of igb driver OpenVAS Vulnerability Test Solaris Update for igb driver 143909-03 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris 9 (sparc) : 125326-03

SunOS 5.9: wget patch. Date this patch was last updated by Sun : May/27/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid4511...

Solaris 10 (x86) : 144107-01 (deprecated)

SunOS 5.10x86: usr/lib/nfs/nfslogd patch. Date this patch was last updated by Sun : Mar/19/10 This plugin has been deprecated and either replaced with individual 144107 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabl...

ISC BIND 9 DNSSEC Bogus NXDOMAIN Response Remote Cache Poisoning Vulnerability

ISC BIND 9 is prone to a remote cache-poisoning vulnerability. An attacker may leverage this issue to manipulate cache data, potentially facilitating man-in-the-middle, site-impersonation, or denial-of-service attacks. Versions prior to the following are vulnerable: BIND 9.4.3-P5 BIND 9.5.2-P2 BI...

Solaris Update for kernel/drv/sparcv9/ixgbe 143354-03

Check for the Version of kernel/drv/sparcv9/ixgbe OpenVAS Vulnerability Test Solaris Update for kernel/drv/sparcv9/ixgbe 143354-03 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for kernel 142901-06

Check for the Version of kernel OpenVAS Vulnerability Test Solaris Update for kernel 142901-06 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Solaris Update for sd 142260-03

Check for the Version of sd OpenVAS Vulnerability Test Solaris Update for sd 142260-03 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for sd 142260-03

Check for the Version of sd OpenVAS Vulnerability Test Solaris Update for sd 142260-03 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the GNU...

Solaris Update for Install and Utilities 119254-73

Check for the Version of Install and Utilities OpenVAS Vulnerability Test Solaris Update for Install and Utilities 119254-73 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CA20100304-01: Security Notice for CA SiteMinder

CA20100304-01: Security Notice for CA SiteMinder Issued: March 04, 2010 CA's support is alerting customers to a security risk with CA SiteMinder. Multiple cross site scripting XSS vulnerabilities exist that can allow a remote attacker to potentially gain sensitive information. CA has provided...

Solaris 9 (sparc) : 117143-02

SunOS 5.9: xntpd Patch. Date this patch was last updated by Sun : Mar/09/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

[security bulletin] HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02033170 Version: 1 HPSBMA02489 SSRT090065 rev.1 - HP Performance Insight , Remote Execution of Arbitrary Commands NOTICE: The information in this Security Bulletin should be acted upon as soon a...

Solaris 9 (x86) : 117144-02

SunOS 5.9x86: xntpd Patch. Date this patch was last updated by Sun : Mar/09/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Sun Solaris DHCP Client Arbitrary Code Execution (CVE-2005-2870)

The DHCP protocol is used by network administrators to centrally manage and automate the assignment of IP addresses on a network. In addition to IP address assignment, DHCP clients receive from a DHCP server information that is required to manage their network configuration including the sub-net...