Design/Logic Flaw

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2008-5699

CVE-2008-5699 affects Sun Solaris 10 and OpenSolaris (snv_50 through snv_104). The name service cache daemon (nscd) does not properly check permissions, allowing local users to gain privileges and access sensitive information via unspecified vectors. Connected sources corroborate Solaris patches ...

CVE-2008-5699

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

Fujitsu-Siemens WebTransactions远程命令执行漏洞

BUGTRAQ ID: 32927 CNCAN ID：CNCAN-2008122201 Fujitsu-Siemens WebTransactions是一款允许为主机应用程序提供新的业务流程和应用的解决方案。 Fujitsu-Siemens WebTransactions不正确处理输入验证，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 部分条件下，当清理临时会话数据时，WBPublish.exe传递没有经过验证的输入就给system函数，可导致无需验证攻击者以WEB进程权限执行任意命令。 Fujitsu-Siemens WebTransactions 7.1...

Sun Solaris Name Service Cache Daemon (nscd(1M))本地特权提升漏洞

BUGTRAQ ID: 32921 CNCAN ID：CNCAN-2008122006 Sun Solaris是一款商业性质的操作系统。 Solaris名字服务缓存守护程序（name service cache daemon nscd1M）在部分条件下存在安全漏洞。允许非特权用户获得对未授权信息的访问和获得高特权。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun...

CVE-2008-5684

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

CVE-2008-5689

tun in IP Tunnel in Solaris 10 and OpenSolaris snv01 through snv76 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference...

CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

Session fixation

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

Null pointer dereference

tun in IP Tunnel in Solaris 10 and OpenSolaris snv01 through snv76 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference...

Design/Logic Flaw

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5690

CVE-2008-5690 affects Sun Solaris 8–10 and OpenSolaris builds; root cause is the pam_krb5 credential renewal mechanism introduced flaws in cache file permissions and missing credential storage in store_cred, enabling local users to cause authentication failure (DoS). Connected documents confirm a...

CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5689

CVE-2008-5689 affects Solaris 10/OpenSolaris (SNV 01–SNV 76) via the tun/tunnel SIOCGTUNPARAM IOCTL. The underlying issue is a NULL pointer dereference triggered by a crafted IOCTL, allowing local users to cause a denial of service (panic) and potentially execute arbitrary code. Affected componen...

CVE-2008-5684

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

[TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference Advisory ID: TKADV2008-015 Revision: 1.0 Release Date: 2008/12/17 Last Modified: 2008/12/17 Date Reported: 2007/09/04 Author: Tobias Klein tk at trapkit.de Affected Software:...

Sun Solaris DoS

SIOCGTUNPARAM IOCTL processing NULL pointer dereference...

Sun Solaris IP隧道参数空指针引用漏洞

BUGTRAQ ID: 32904 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的IP隧道实现中存在空指针引用漏洞，本地攻击者可以通过发送特制的SIOCGTUNPARAM IOCTL请求导致拒绝服务或执行任意内核态代码。 以下是inet/ip/ip.c中的有漏洞代码段： ... 26692 void 26693 ipprocessioctlipsqt ipsq, queuet q, mblkt mp, void arg 26694 ... 26717 1 ci.ciipif = NULL ... 26735 case TUNCMD: ... 2674...

Solaris 8 (sparc) : 138885-01

SunOS 5.8: rpc.ypupdated patch. Date this patch was last updated by Sun : Dec/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...