CVE-2008-1095

Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...

CVE-2008-1095

Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...

CVE-2008-1095

CVE-2008-1095 affects the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10. The vulnerability is described as an unspecified issue that allows remote attackers to bypass firewall policies or cause a denial of service (panic) via unknown vectors, with possible involvement of ICMP ...

Format string and buffer-overflow in SurgeMail 38k4

Luigi Auriemma Application: SurgeMail Mail Server http://netwinsite.com/surgemail/ Netwin's WebMail http://netwinsite.com/webmail/ Versions: SurgeMail = 38k4 and beta 39a Netwin's WebMail = 3.1s only bug A Platforms: Windows, Linux, FreeBSD, MacOSX and Solaris Bugs: A format string in webmail.exe...

NULL pointer in SurgeFTP 2.3a2

Luigi Auriemma Application: SurgeFTP http://www.netwinsite.com/surgeftp/ Versions: = 2.3a2 Platforms: Windows, Linux and Solaris Bug: NULL pointer access Exploitation: remote Date: 25 Feb 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fi...

Security Vulnerability May Allow Solaris Firewall Compromise or Creation of Denial of Service (DoS) Condition)

...

Sun Solaris DTrace动态追踪框架信息泄露漏洞

BUGTRAQ ID: 27942 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 DTrace（请见dtrace1M）动态追踪框架中的安全漏洞可能允许给予了PRIVDTRACEUSER或PRIVDTRACEPROC权限（请见privileges5）的本地用户或非全局区执行一些内核级追踪，然后这些用户就可以访问敏感信息。 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法：...

lighttpd文件描述符数组远程拒绝服务漏洞

BUGTRAQ ID: 27943 Lighttpd是一款轻型的开放源码Web Server软件包。 Lighttpd在分配全局文件描述符数组时存在计算错误，远程攻击者可能利用此漏洞导致服务不可用。 创建文件描述符数组的方式如下： fdevent.c： 15 fdevents fdeventinitsizet maxfds, fdeventhandlert type 19 ev-fdarray = callocmaxfds, sizeofev-fdarray; server.c： 1076 if NULL == srv-ev = fdeventinitsrv-maxfds + 1,...

Solaris 10 (x86) : 136717-01

SunOS 5.10x86: namefs driver. Date this patch was last updated by Sun : Jan/24/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 10 (sparc) : 136716-01

SunOS 5.10: namefs driver. Date this patch was last updated by Sun : Jan/24/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Design/Logic Flaw

Unspecified vulnerability in the dynamic tracing framework DTrace in Sun Solaris 10 allows local users with PRIVDTRACEUSER or PRIVDTRACEPROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126...

CVE-2008-0933

Multiple race conditions in the CPU Performance Counters cpc subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service panic via unspecified vectors related to kcpcunbind and kcpcrestore...

Race condition

Multiple race conditions in the CPU Performance Counters cpc subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service panic via unspecified vectors related to kcpcunbind and kcpcrestore...

CVE-2008-0938

Unspecified vulnerability in the dynamic tracing framework DTrace in Sun Solaris 10 allows local users with PRIVDTRACEUSER or PRIVDTRACEPROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126...

CVE-2008-0933

CVE-2008-0933 corresponds to multiple race conditions in the Solaris 10 kernel’s CPU Performance Counters (cpc) subsystem. The vulnerability affects the kernel component related to kcpc_unbind and kcpc_restore, enabling local users to trigger a denial of service (panic) via unspecified vectors. T...

CVE-2008-0933

Multiple race conditions in the CPU Performance Counters cpc subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service panic via unspecified vectors related to kcpcunbind and kcpcrestore...

CVE-2008-0938

Unspecified vulnerability in the dynamic tracing framework DTrace in Sun Solaris 10 allows local users with PRIVDTRACEUSER or PRIVDTRACEPROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126...

CVE-2008-0938

Technical details for CVE-2008-0938 are not publicly available in the provided connected documents. The entries reference Solaris DTrace and privilege-based access, but no concrete affected versions, root cause, or remediation are included here. Monitor for updates.

Null pointer dereference

Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service panic via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319...

CVE-2008-0836

Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service panic via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319...