CVE-2009-3937

CVE-2009-3937 affects Sun/OpenSolaris Solaris in the TCP sockets stack. Specifically, a memory leak in the kernel related to tcp_sendmsg processing of ancillary data could enable local users to exhaust kernel memory, leading to a denial of service. The vulnerability is described for OpenSolaris s...

Sun Solaris TCP套接字本地拒绝服务漏洞

Bugraq ID: 36992 Sun Solaris是一款商业性质的操作系统。 Solaris TCP套接字存在安全问题，允许本地非特权用户泄漏内核内存，造成拒绝服务攻击。 Sun OpenSolaris svn126 Sun OpenSolaris build snv126 Sun OpenSolaris build snv125 Sun OpenSolaris build snv124 Sun OpenSolaris build snv123 Sun OpenSolaris build snv122 Sun OpenSolaris build snv121 Sun...

LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability

Exploit for unknown platform in category dos / poc ================================================================= LibTIFF 'LZWDecodeCompat' Remote Buffer Underflow Vulnerability ================================================================= Title: LibTIFF 'LZWDecodeCompat' Remote Buffer...

LibTIFF - LZWDecodeCompat() Remote Buffer Underflow

LibTIFF - LZWDecodeCompat Remote Buffer Underflow Bugtraq ID: 35451 Class: Boundary Condition Error Published: Jun 21 2009 12:00AM Updated: Nov 12 2009 06:46PM Credit: wololo Vulnerable: Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu...

LibTIFF - 'LZWDecodeCompat()' Remote Buffer Underflow

Bugtraq ID: 35451 Class: Boundary Condition Error Published: Jun 21 2009 12:00AM Updated: Nov 12 2009 06:46PM Credit: wololo Vulnerable: Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubunt...

LibTIFF 'LZWDecodeCompat()' Remote Buffer Underflow Vulnerability

No description provided by source. Bugtraq ID: 35451 Class: Boundary Condition Error Published: Jun 21 2009 12:00AM Updated: Nov 12 2009 06:46PM Credit: wololo Vulnerable: Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386...

Memory corruption

Memory leak in the Sockets Direct Protocol SDP driver in Sun Solaris 10, and OpenSolaris snv57 through snv94, allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2009-3899

Memory leak in the Sockets Direct Protocol SDP driver in Sun Solaris 10, and OpenSolaris snv57 through snv94, allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

CVE-2009-3899

CVE-2009-3899: Memory leak in the Sockets Direct Protocol (SDP) driver affects Solaris 10 and OpenSolaris snv_57–snv_94, enabling remote attackers to trigger a denial of service via memory consumption. The connected documents do not specify a patch/workaround.

CVE-2009-3899

Memory leak in the Sockets Direct Protocol SDP driver in Sun Solaris 10, and OpenSolaris snv57 through snv94, allows remote attackers to cause a denial of service memory consumption via unspecified vectors...

Solaris 8 (sparc) : 140843-01

SunOS 5.8: /usr/sbin/ntpq patch. Date this patch was last updated by Sun : Nov/03/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (x86) : 140844-01

SunOS 5.8x86: /usr/sbin/ntpq patch. Date this patch was last updated by Sun : Nov/03/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

CVE-2009-3851

Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the...

Command injection

Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the...

CVE-2009-3851

CVE-2009-3851 is associated with Solaris 10 Trusted Extensions interfering with xscreensaver-demo, enabling easier access to an unattended workstation if screen locking fails. Connected Nessus patch records indicate affected platforms include Solaris 10 (x86 and sparc) with X11 6.6.2 patches, and...

CVE-2009-3851

Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the...

Sun Solaris JDS 'xscreensaver(1)'本地信息泄漏漏洞

Bugraq ID: 36891 Sun Solaris是一款开放源代码的操作系统。 Solaris可信扩展存在安全漏洞可导致XScreenSaver xscreensaver1不能正常运行。如果用户选择从JDS菜单中锁住屏幕或屏幕忘记锁屏的情况下，屏幕将不会被自动锁住。使用 "xscreensaver-demo"重新启动XScreenSaver可触发此条件。 Sun Solaris 10x86 Sun Solaris 10sparc Sun Solaris 10.0x86 Sun Solaris 10.0 Sun Solaris 10 厂商解决方案 用户可参考如下供应商提供的补丁： S...

CVE-2009-3839

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

Code injection

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...

CVE-2009-3839

Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv37 through snv125, might allow remote attackers to execute arbitrary code by leveraging access to the X server...