U.S. Defense Information Systems Agency (DISA) Unix Security Readiness Review (SRR) root compromise / VU#433821

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Executive Summary - ----------------- Unprivileged local users can obtain root access on Unix systems where the DISA SRR scripts are run. If a remote user can introduce a file into the filesystem e.g. anonymous ftp, http upload, cdrom, samba share,...

CVE-2009-4191

Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vdsollocal module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable...

Design/Logic Flaw

Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vdsollocal module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable...

CVE-2009-4191

Unspecified vulnerability in the kernel in Sun Solaris 10 and OpenSolaris 2009.06 on the x86-64 platform allows local users to gain privileges via unknown vectors, as demonstrated by the vdsollocal module in VulnDisco Pack Professional 8.12. NOTE: as of 20091203, this disclosure has no actionable...

CVE-2009-4191

CVE-2009-4191 concerns an unspecified local privilege escalation in the kernel of Sun Solaris 10 and OpenSolaris 2009.06 running on x86-64. The vulnerability is demonstrated by the vd_sol_local module in VulnDisco Pack Professional 8.12 and is described as allowing local users to gain privileges ...

Solaris 10 (sparc) : 125215-07 (deprecated)

SunOS 5.10: wget patch. Date this patch was last updated by Sun : Sep/15/16 This plugin has been deprecated and either replaced with individual 125215 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Sun Solaris sshd Timeout Mechanism Remote Denial of Service

Binary data 5247.prm...

CVE-2009-4080

Multiple unspecified vulnerabilities in ldapcachemgr aka the LDAP client configuration cache daemon in Sun Solaris 9 and 10, and OpenSolaris before snv78, allow local users to cause a denial of service daemon crash via vectors involving multiple serviceSearchDescriptor attributes and a call to th...

Design/Logic Flaw

Multiple unspecified vulnerabilities in ldapcachemgr aka the LDAP client configuration cache daemon in Sun Solaris 9 and 10, and OpenSolaris before snv78, allow local users to cause a denial of service daemon crash via vectors involving multiple serviceSearchDescriptor attributes and a call to th...

CVE-2009-4080

CVE-2009-4080 affects Sun Solaris 9/10 and OpenSolaris before snv_78, via ldap_cachemgr (LDAP client configuration cache daemon). The vulnerability allows local users to trigger a denial of service (daemon crash) through vectors involving multiple serviceSearchDescriptor attributes and a getldap_...

CVE-2009-4080

Multiple unspecified vulnerabilities in ldapcachemgr aka the LDAP client configuration cache daemon in Sun Solaris 9 and 10, and OpenSolaris before snv78, allow local users to cause a denial of service daemon crash via vectors involving multiple serviceSearchDescriptor attributes and a call to th...

Design/Logic Flaw

Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv99 through snv123, allows remote attackers to cause a denial of service daemon outage via unknown vectors that trigger a "dangling sshd authentication thread."...

CVE-2009-4075

Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv99 through snv123, allows remote attackers to cause a denial of service daemon outage via unknown vectors that trigger a "dangling sshd authentication thread."...

CVE-2009-4075

Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv99 through snv123, allows remote attackers to cause a denial of service daemon outage via unknown vectors that trigger a "dangling sshd authentication thread."...

CVE-2009-4075

CVE-2009-4075 is a Solaris 10/OpenSolaris sshd timeout vulnerability causing remote denial of service via a dangling sshd authentication thread. Connected sources confirm affected products include SunOS 5.10 (SPARC and x86) with OpenSolaris snv_99–snv_123. The vulnerability is addressed by Sun pa...

[security bulletin] HPSBMA02477 SSRT090177 rev.2 - HP OpenView Network Node Manager (OV NNM), Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01926980 Version: 2 HPSBMA02477 SSRT090177 rev.2 - HP OpenView Network Node Manager OV NNM, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should be acted upon as...

Sun Solaris in.rwhod Code Execution (CVE-2004-1351)

Sun Microsystems provides a service called in.rwhod in the Solaris operating system line of products. The service is responsible for maintaining a database to be used by the "rwho" and "ruptime" processes by exchanging status information with other similar services running on other hosts on the...

Memory corruption

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv106 through snv126 allows local users to cause a denial of service kernel memory consumption via unspecified vectors involving tcpsendmsg processing "ancillary data."...

CVE-2009-3937

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv106 through snv126 allows local users to cause a denial of service kernel memory consumption via unspecified vectors involving tcpsendmsg processing "ancillary data."...

CVE-2009-3937

Memory leak in Solaris TCP sockets in Sun OpenSolaris snv106 through snv126 allows local users to cause a denial of service kernel memory consumption via unspecified vectors involving tcpsendmsg processing "ancillary data."...