[security bulletin] HPSBMA02385 SSRT080161 rev.1 - HP Service Manager (HPSM), Gain Extended Privileges

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01603910 Version: 1 HPSBMA02385 SSRT080161 rev.1 - HP Service Manager HPSM, Gain Extended Privileges NOTICE: The information in this Security Bulletin should be acted upon as soon as possible...

Sun Solaris DHCP请求处理拒绝服务及代码执行漏洞

BUGTRAQ ID: 32213 CVECAN ID: CVE-2007-5365 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的DHCP服务器（in.dhcpd1M）处理DHCP请求中的安全漏洞可能允许远程非特权用户杀死DHCP服务进程（拒绝服务）或以root用户权限执行任意指令。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 -...

Sun Solstice X.25本地拒绝服务漏洞

CNCAN ID：CNCAN-2008111104 Sun Solstice是一款企业级网络管理方案。 Sun Solstice X.25存在拒绝服务问题，本地攻击者可以利用漏洞使系统崩溃。 对"/dev/xty"有读权限的本地非特权用户利用Solstice X.2存在的缺陷可导致多CPU上的系统触发panic，造成拒绝服务攻击。 Solstice X.25 9.x 可参考如下补丁： X.25 9.2 for Solaris 8, 9 and 10 on SPARC:...

Sun Solaris DHCP请求处理漏洞

CVE ID：CVE-2007-5365 Sun Solaris是一款商业性质的操作系统。 Sun Solaris处理DHCP请求存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 -处理DHCP请求时in.dhcpd存在边界错误，可导致缓冲区溢出。 -处理DHCP请求时in.dhcpd存在一个未明错误，可导致DHCP服务器守护程序崩溃或以root权限执行任意代码。 Sun Solaris 10 Sun Solaris 8 Sun Solaris 9 可参考如下补丁： -- SPARC Platform -- Solaris 8:...

CVE-2008-5010

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service assertion failure and daemon exit via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805...

Design/Logic Flaw

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service assertion failure and daemon exit via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805...

CVE-2008-5010

CVE-2008-5010 affects Sun Solaris 8–10 DHCP server (in.dhcpd) and OpenSolaris prior to snv_103. The issue allows a remote attacker to trigger a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the “number of offers” (Bug ID 6713805). The vulnerability is ...

CVE-2008-5010

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service assertion failure and daemon exit via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805...

Preemptive Protection against Sun Solaris sadmind Buffer Overflow Vulnerability

A vulnerability was reported in Sun Solaris Solstice AdminSuite daemon sadmind. Solstice AdminSuite is a set of applications for distributed system administration. sadmind is a daemon used by SolsticeAdminsuite to control the servers running Sun Solaris operating system. One of the sadmind...

Adobe Reader 'util.printf()' JavaScript Function Stack Buffer Overflow Vulnerability

Description Adobe Reader is prone to a stack-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code with the privileges of the user running the application or crash t...

[SECURITY] Fedora 9 Update: libtirpc-0.1.7-20.fc9

This package contains SunLib's implementation of transport-independent RPC TI-RPC documentation. This library forms a piece of the base of Open Network Computing ONC, and is derived directly from the Solaris 2.3 source. TI-RPC is an enhanced version of TS-RPC that requires the UNIX System V...

SECOBJADV-2008-04: Symantec Veritas Storage Foundation Memory Disclosure Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-04 = ====================================================================== Veritas Storage Foundation Memory Disclosure Vulnerability...

SECOBJADV-2008-05: Symantec Veritas Storage Foundation Arbitrary File Read Vulnerability

====================================================================== = Security Objectives Advisory SECOBJADV-2008-05 = ====================================================================== Veritas Storage Foundation Arbitrary File Read Vulnerability...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

Information disclosure

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

Code injection

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...

CVE-2008-4638

CVE-2008-4638 affects Symantec Veritas Storage Foundation (VxFS) 5.0 and earlier, via the Quick I/O for Databases feature. The vulnerable component is the setuid root utility qioadmin , which can be fed an arbitrary filename and will write that file’s contents to the standard error stream, enabli...

CVE-2008-3248

qiomkfile in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, does not initialize filesystem blocks during creation of a file, which allows local users to obtain sensitive information by creating and then reading file...

CVE-2008-4638

qioadmin in the Quick I/O for Database feature in Symantec Veritas File System VxFS on HP-UX, and before 5.0 MP3 on Solaris, Linux, and AIX, allows local users to read arbitrary files by causing qioadmin to write a file's content to standard error in an error message...