CVE-2009-0838

The CVE-2009-0838 issue affects Sun Solaris 10 and OpenSolaris builds snv_88 through snv_102, where the crypto pseudo device driver fails to free memory. This can enable local attackers to trigger a denial-of-service (panic) via the vmem_hash_delete path. Public details in connected records confi...

Solaris/x86 - add services and execve inetd - 201 bytes

No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / char c0de =...

Fedora Update for libtirpc FEDORA-2008-9204

Check for the Version of libtirpc OpenVAS Vulnerability Test Fedora Update for libtirpc FEDORA-2008-9204 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2009-0361

Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pamsetcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, a...

CVE-2009-0361

Russ Allbery pam-krb5 before 3.13, as used by libpam-heimdal, su in Solaris 10, and other software, does not properly handle calls to pamsetcred when running setuid, which allows local users to overwrite and change the ownership of arbitrary files by setting the KRB5CCNAME environment variable, a...

CVE-2009-0361

CVE-2009-0361 concerns pam_krb5 in libpam-krb5 and related components. Concrete details in connected documents show that pam_krb5 fails to handle pam_setcred correctly when a process runs setuid, enabling a local user to create or modify arbitrary files by setting the KRB5CCNAME environment varia...

pam-krb5 security advisory (3.12 and earlier)

pam-krb5 security vulnerability Vulerability type: Local privilege escalation, local file overwrite Versions affected: All versions prior to 3.13 Versions fixed: 3.13 and later Reported: 2009-01-29 Public announcement: 2009-02-11 CVE IDs: CVE-2009-0360, CVE-2009-0361 A security vulnerability in...

Design/Logic Flaw

The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service 32-bit application failure and login outage by opening a large number of sockets...

CVE-2009-0480

The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service 32-bit application failure and login outage by opening a large number of sockets...

CVE-2009-0480

The IP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv82, uses an improper arena when allocating minor numbers for sockets, which allows local users to cause a denial of service 32-bit application failure and login outage by opening a large number of sockets...

CVE-2009-0480

CVE-2009-0480 affects Sun Solaris 8–10 and older OpenSolaris builds (pre-sn v82). The IP implementation allocates minor socket numbers via an improper arena, enabling local users to trigger denial of service by opening many sockets (32-bit app failure and login outage). Affected: Solaris 8/9/10 (...

[security bulletin] HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01661610 Version: 1 HPSBMA02406 SSRT080100 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted up...

Ghostscript < 8.64 'gdevpdtb.c' Buffer Overflow Vulnerability

No description provided by source. Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with...

Solaris 10 (sparc) : 139560-02

SunOS 5.10: autofs patch. Date this patch was last updated by Sun : Mar/09/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Ghostscript < 8.64 - 'gdevpdtb.c' Local Buffer Overflow

Ghostscript is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it into a finite-sized buffer. Exploiting this issue allows remote attackers to overwrite a sensitive memory buffer with arbitrary data, potentially allowing...

Code injection

Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv37, when automountd is used, allows user-assisted remote attackers to cause a denial of service unresponsive NFS filesystems via unknown vectors...

CVE-2008-6024

Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv37, when automountd is used, allows user-assisted remote attackers to cause a denial of service unresponsive NFS filesystems via unknown vectors...

CVE-2008-6024

Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv37, when automountd is used, allows user-assisted remote attackers to cause a denial of service unresponsive NFS filesystems via unknown vectors...

CVE-2008-6024

CVE-2008-6024 concerns an unspecified vulnerability in the NFSv4 client module of the kernel on Sun Solaris 10 and OpenSolaris prior to snv_37, triggered when automountd is used. The issue allows user-assisted remote attackers to cause denial of service (unresponsive NFS filesystems) via unknown ...

Solaris 10 (x86) : 140384-01

SunOS 5.10x86: ptsl patch. Date this patch was last updated by Sun : Jan/19/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...