CVE-2009-0874

CVE-2009-0874 concerns multiple unspecified vulnerabilities in the Doors subsystem of the kernel on Solaris 8–10 and OpenSolaris before snv_94. The flaws enable local users to cause a denial of service (process hang) and, potentially, bypass file permissions or gain kernel-context privileges. Doc...

CVE-2009-0875

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...

CVE-2009-0875

CVE-2009-0875 describes a race condition in the kernel Doors subsystem affecting Sun Solaris 8–10 and OpenSolaris before snv_94. The vulnerability stems from how control is transferred from a caller to a door server, enabling a local user to cause a process hang (denial of service) and, in some c...

CVE-2009-0873

The NFS daemon aka nfsd in Sun Solaris 10 and OpenSolaris before snv106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys a...

CVE-2009-0872

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...

Design/Logic Flaw

The NFS daemon aka nfsd in Sun Solaris 10 and OpenSolaris before snv106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys a...

Design/Logic Flaw

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...

CVE-2009-0873

The NFS daemon aka nfsd in Sun Solaris 10 and OpenSolaris before snv106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys a...

CVE-2009-0872

CVE-2009-0872 affects Sun Solaris 10 and OpenSolaris builds prior to snv_111, where the NFS server fails to properly enforce AUTH_NONE (sec=none) when used with other security modes. This allows remote attackers to bypass access controls and read/modify files by abusing a combination of AUTH_NONE...

CVE-2009-0872

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...

CVE-2009-0873

CVE-2009-0873 affects Sun Solaris 10 and OpenSolaris before snv_106, where the NFS daemon (nfsd) under NFSv3 mishandles combinations of security modes, allowing remote attackers to bypass access controls and read or modify protected files by abusing incompatible sec=sys and sec=krb5 configuration...

Sun Solaris NFS Sun Solaris NFS服务器内核模块本地拒绝服务漏洞

BUGTRAQ ID: 34031 CNCAN ID：CNCAN-2009030901 Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFSv4服务器内核模块存在安全问题，如果服务器共享一个hsfs7FS文件系统 CD-ROM, DVD媒介，本地非特权用户可导致NFSv4服务器挂起。 目前没有详细漏洞细节提供 Sun Solaris 10x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun...

Sun Solaris加密驱动本地拒绝服务漏洞

BUGTRAQ ID: 34000 CVECAN ID: CVE-2009-0838 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的加密伪设备驱动没有正确地释放内存，本地攻击者可以通过vmemhashdelete函数导致系统忙碌。如果出现上述漏洞，系统可能出现类似于以下栈追踪的忙碌： vmemhashdelete: bad free vmemhashdelete vmemxfree objectgetattributevalue fopioctl ioctl Sun Solaris 10.0x86 Sun Solaris 10.0 Sun...

CVE-2009-0870

The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv111, allow local users to cause a denial of service infinite loop and system hang by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4opreaddir function...

Design/Logic Flaw

The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv111, allow local users to cause a denial of service infinite loop and system hang by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4opreaddir function...

CVE-2009-0870

CVE-2009-0870 affects Sun Solaris 10 (and OpenSolaris before snv_111) where the NFSv4 Server kernel module can cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem shared via NFSv4, due to the rfs4_op_readdir path. Affected platforms include Solaris 10 SPARC a...

CVE-2009-0870

The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv111, allow local users to cause a denial of service infinite loop and system hang by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4opreaddir function...

CVE-2009-0838

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv88 through snv102, does not properly free memory, which allows local users to cause a denial of service panic via unspecified vectors, related to the vmemhashdelete function...

Design/Logic Flaw

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv88 through snv102, does not properly free memory, which allows local users to cause a denial of service panic via unspecified vectors, related to the vmemhashdelete function...

CVE-2009-0838

The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv88 through snv102, does not properly free memory, which allows local users to cause a denial of service panic via unspecified vectors, related to the vmemhashdelete function...