CVE-2009-2314

Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors...

Race condition

Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors...

CVE-2009-2314

CVE-2009-2314 describes a race condition in the Sun Lightweight Availability Collection Tool 3.0 running on Solaris 7–10. The vulnerability allows local users to overwrite arbitrary files via unspecified vectors due to the race-condition condition. The available sources identify the affected prod...

CVE-2009-2314

Race condition in the Sun Lightweight Availability Collection Tool 3.0 on Solaris 7 through 10 allows local users to overwrite arbitrary files via unspecified vectors...

Solaris内核udp(7p)远程拒绝服务漏洞

BUGTRAQ ID: 35545 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris NFSv4服务器内核模块nfsportmon可调参数中的安全漏洞可能允许某些远程非特权用户获得对共享资源的网络访问，从而允许用户读写访问任意文件。仅在配置为NFSv4服务器的系统上才会出现这个漏洞。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 - snv118 临时解决方法： 在/etc/default/nfs中设置NFSSERVERVERSMAX=3，配置NFS服务器系统不要使用NFSv4。 厂商补...

Code injection

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...

CVE-2009-2297

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...

CVE-2009-2296

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors...

Code injection

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors...

CVE-2009-2296

CVE-2009-2296 affects Sun Solaris 10 and OpenSolaris prior to snv_119 where the NFSv4 server kernel module mishandles the nfs_portmon setting. This allows remote attackers to access shares and read, create, and modify arbitrary files via unspecified vectors. Remediation is through Solaris patches...

CVE-2009-2297

The CVE-2009-2297 entry concerns an unspecified vulnerability in the UDP subsystem of the Solaris/OpenSolaris kernel when Trusted Extensions is enabled. The issue is triggered by a regression in earlier kernel patches that affects the crgetlabel path, leading to a remote denial-of-service (panic)...

CVE-2009-2296

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv119, does not properly implement the nfsportmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors...

CVE-2009-2297

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv90 through snv108, when Solaris Trusted Extensions is enabled, allows remote attackers to cause a denial of service panic via unspecified vectors involving the crgetlabel function, related to a "TX...

CVE-2009-2283

Multiple cross-site scripting XSS vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-2282

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Authorization

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...

CVE-2009-2282

The CVE-2009-2282 issue affects Sun Solaris 10 on SPARC and OpenSolaris snv_41–snv_108, where the Virtual Network Terminal Server daemon (vntsd) does not validate authorization for guest console access. This allows local control-domain users to obtain guest-domain privileges via unspecified vecto...

CVE-2009-2283

CVE-2009-2283 : The Sun Java Web Console 3.0.2–3.0.5 (Sun Solaris 10) contains multiple XSS vulnerabilities in the help jsp scripts (e.g., helpwindow.jsp, masthead.jsp). An attacker could inject arbitrary HTML/script in the user’s browser session. The vectors are not specified in the provided doc...

CVE-2009-2282

The Virtual Network Terminal Server daemon vntsd for Logical Domains aka LDoms in Sun Solaris 10, and OpenSolaris snv41 through snv108, on SPARC platforms does not check authorization for guest console access, which allows local control-domain users to gain guest-domain privileges via unknown...