Integer overflow

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

CVE-2008-2708

Unspecified vulnerability in the Sun 1 UltraSPARC T2 and 2 UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv93, allows local users to cause a denial of service panic via unspecified vectors, probably related to core files...

CVE-2008-2710

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

CVE-2008-2708

CVE-2008-2708 affects Sun Solaris 10 and OpenSolaris (pre-sn v_93) on UltraSPARC T2 and UltraSPARC T2+ kernel modules. The vulnerability is an unspecified local issue that can cause a denial of service (panic) via unspecified vectors, likely related to core files. Connected documents confirm the ...

CVE-2008-2710

Integer signedness error in the ipsetsrcfilter function in the IP Multicast Filter in uts/common/inet/ip/ipmulti.c in the kernel in Sun Solaris 10 and OpenSolaris before snv92 allows local users to execute arbitrary code in other Solaris Zones via an SIOCSIPMSFILTER IOCTL request with a large val...

CVE-2008-2708

Unspecified vulnerability in the Sun 1 UltraSPARC T2 and 2 UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv93, allows local users to cause a denial of service panic via unspecified vectors, probably related to core files...

CVE-2008-2710

CVE-2008-2710 affects Sun Solaris 10 and OpenSolaris prior to SNV_92. The kernel component involved is ip_set_srcfilter in uts/common/inet/ip/ip_multi.c, where a signedness issue can trigger an out-of-bounds write via an SIOCSIPMSFILTER IOCTL with a large imsf->imsf_numsrc, enabling local user...

Design/Logic Flaw

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

Code injection

Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv93 allows remote attackers to cause a denial of service network connectivity loss via unknown vectors...

CVE-2008-2706

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-2707

Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv93 allows remote attackers to cause a denial of service network connectivity loss via unknown vectors...

CVE-2008-2707

CVE-2008-2707 affects the e1000g driver in Sun Solaris 10 and OpenSolaris prior to snv_93, causing remote DoS (network connectivity loss) via unknown vectors. Sun patch 137289-02 (SPARC) and 137293-02 (x86) address this issue. The vulnerability details are described as unspecified; no exploit inf...

CVE-2008-2707

Unspecified vulnerability in the e1000g driver in Sun Solaris 10 and OpenSolaris before snv93 allows remote attackers to cause a denial of service network connectivity loss via unknown vectors...

CVE-2008-2706

Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service panic by submitting and retrieving user-defined events, probably related to a NULL dereference...

CVE-2008-2706

CVE-2008-2706 concerns Sun Solaris 10 where the event port implementation can panic (local DoS) due to a NULL dereference. Affected platforms include SunOS 5.10 (Solaris 10) for both SPARC and x86 architectures. The connected advisories indicate kernel patches to fix this issue: 137111-08 (SPARC)...

[security bulletin] HPSBMA02340 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager (OV NNM), Remote Execution of Arbitrary Code, Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01471755 Version: 1 HPSBMA02340 SSRT080024, SSRT080041 rev.1 - HP OpenView Network Node Manager OV NNM, Remote Execution of Arbitrary Code, Denial of Service DoS NOTICE: The information in this...

solaris/x86 add services and execve inetd 201 bytes

No description provided by source. / Solaris/x86 Just execve's the following: "echo "ingreslock stream tcp nowait root /bin/sh sh -i"/tmp/x;" "/usr/sbin/inetd -s /tmp/x; /bin/rm -f /tmp/x"; for a trivial remote bd. Used in a few old Solaris/x86 remote exploits. / ...

solaris/x86 execve /bin/sh toupper evasion 84 bytes

No description provided by source. / Solaris/x86 Used for toupper evasion look to the linux version for an explanation and usage example. / char c0de = / main: / "\xeb\x33" / jmp callz / / start: /...

Code injection

Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service disk consumption via unspecified vectors...

CVE-2008-2552

Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service disk consumption via unspecified vectors...