CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery CSRF attacks and execute arbitrary FTP commands via a long ftp:// URI...

CVE-2008-4160

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

Null pointer dereference

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

CVE-2008-4160

Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service NULL pointer dereference and kernel panic via unknown vectors related to the Solaris Access Control List ACL implementation...

CVE-2008-4160

CVE-2008-4160 affects the UFS module in Solaris 8–10 and OpenSolaris. The vulnerability is a local denial of service caused by a NULL pointer dereference in the Solaris ACL implementation, leading to a kernel panic. Connected advisories reference Solaris patch updates: 139483-05 (SunOS 5.10 SPARC...

CVE-2008-4131

Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with 1 the -t option and 2 the :tag command in the a vi, b ex, c vedit, d view, and e edit programs...

Command injection

Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with 1 the -t option and 2 the :tag command in the a vi, b ex, c vedit, d view, and e edit programs...

CVE-2008-4131

CVE-2008-4131 concerns multiple local privilege escalation vulnerabilities in Sun Solaris 8–10 related to how tags are handled by the editors vi, ex, vedit, view and edit (via -t and :tag commands). The connected OpenVAS entries indicate Solaris updates for vi/ex (e.g., 120831-06, 120830-06, 1109...

CVE-2008-4131

Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with 1 the -t option and 2 the :tag command in the a vi, b ex, c vedit, d view, and e edit programs...

Solaris 9 (x86) : 121775-01

GNOME 2.6.0x86: GNOME panel and support libraries Patch. Date this patch was last updated by Sun : Sep/09/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Sun Solaris 9/10 Text Editors - Command Execution

source: https://www.securityfocus.com/bid/31229/info Sun Solaris text editors are prone to a command-execution vulnerability. An attacker may leverage this issue to execute arbitrary commands with the privileges of another user on the affected computer. Sun Solaris 8, 9, and 10 are affected. $ ec...

Solaris 9 (x86) : 116479-02

SunOS 5.9x86: edit, ex, vedit, vi and view patch. Date this patch was last updated by Sun : Sep/16/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Sun Solaris 910 Text Editors - Command Execution

Sun Solaris 910 Text Editors - Command Execution source: https://www.securityfocus.com/bid/31229/info Sun Solaris text editors are prone to a command-execution vulnerability. An attacker may leverage this issue to execute arbitrary commands with the privileges of another user on the affected...

Generic x86 Debug Trap

Generate a debug trap in the target process This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 1 include Msf::Payload::Single def initializeinfo = supermergeinfoinfo, 'Name' = 'Generi...

IBM DB2 Universal Database Server 8.2 Fixpak 17之前存在多个漏洞

BUGTRAQ ID: 31058 CNCAN ID：CNCAN-2008091101 IBM DB2是一款大型的商业关系数据库系统， IBM DB2 Universal Database Server 8.2 Fixpak 17之前版本存在多个漏洞，攻击者可以利用漏洞进行如下攻击： -相关CONNECT / ATTACH处理存在远程拒绝服务攻击。 -DB2FMP过程存在未明安全问题。 -DB2JDS存在远程拒绝服务攻击。 -在Windows平台下以系统特权执行DB2FMP过程。 攻击者可以利用这些漏洞进行拒绝服务攻击，也可能造成其他未明攻击行为。 IBM DB2 Universal...

Solaris 10 (x86) : 139100-04 (deprecated)

SunOS 5.10x86: gtar patch. Date this patch was last updated by Sun : Apr/19/10 This plugin has been deprecated and either replaced with individual 139100 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

Solaris 8 (sparc) : 139093-03

GNOME 2.0.0: SUNWTiff libtiff library patch. Date this patch was last updated by Sun : Mar/19/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 138070-03

SunOS 5.10: nfssrv and rpcsec patch. Date this patch was last updated by Sun : Aug/21/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 8 (x86) : 139094-03

GNOME 2.0.0x86: SUNWTiff libtiff library patch. Date this patch was last updated by Sun : Mar/19/12 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...