CVE-2006-0482

Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service hang via a "date -s" command, which causes invalid sign extended arguments to be provided to the getcompattimespec function call...

CVE-2006-0482

CVE-2006-0482 affects Linux kernel 2.6.x on SPARC; get_compat_timespec() sanitization is insufficient, enabling local denial of service (hang) via date -s. Debian DSAs document a fix in kernel-source-2.6.8 packages (e.g., 2.6.8-16sarge2) and kernel upgrades; systems should upgrade and reboot to m...

CVE-2006-0482: Undefined Security Weakness

Linux kernel 2.6.15.1 and earlier, when running on SPARC architectures, allows local users to cause a denial of service hang via a "date -s" command, which causes invalid sign extended arguments to be provided to the getcompattimespec function call...

Solaris 10 (sparc) : 120661-04

SunOS 5.10: rpcmod patch. Date this patch was last updated by Sun : Jan/10/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 10 (sparc) : 119596-03

SunOS 5.10: hsfs patch. Date this patch was last updated by Sun : Feb/22/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

SPARC NOP Generator

SPARC NOP generator This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework SingleByte ---------- This class implements NOP generator for the SPARC platform class MetasploitModule Msf::Nop Nop types InsSethi = 0 InsArithmetic...

Sun and Blackdown Java: Applet privilege escalation

Background Sun and Blackdown both provide implementations of the Java Development Kit JDK and Java Runtime Environment JRE. Description Adam Gowdiak discovered multiple vulnerabilities in the Java Runtime Environment's Reflection APIs that may allow untrusted applets to elevate privileges. Impact...

SPARC DWORD XOR Encoder

This encoder is optyx's 48-byte SPARC encoder with some tweaks. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SPARC DWORD XOR Encoder', 'Description' = %q This encoder is optyx's 48-byte SPAR...

[SA18420] Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability

TITLE: Sun Solaris "/proc" Filesystem Searching Denial of Service Vulnerability SECUNIA ADVISORY ID: SA18420 VERIFY ADVISORY: http://secunia.com/advisories/18420/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/ DESCRIPTION: ...

Solaris 10 (sparc) : 118371-10

SunOS 5.10: elfsign patch. Date this patch was last updated by Sun : Apr/16/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

DSA-921-1 kernel-source-2.4.27 - several

Bulletin has no description...

Solaris 10 (sparc) : 121308-20 (deprecated)

SunOS 5.10: Solaris Management Console Pat. Date this patch was last updated by Sun : Apr/02/10 This plugin has been deprecated and either replaced with individual 121308 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@...

solaris/sparc setreuid/execve 56 bytes

solaris/sparc setreuid/execve 56 bytes. Shellcode exploit for solarissparc platform / [email protected] setreuid shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode = "\x90\x1A\x40\x09" / xor %o1, %o1, %o0 /...

solaris/sparc setreuid/execve 56 bytes

Exploit for solaris/sparc platform in category shellcode ====================================== solaris/sparc setreuid/execve 56 bytes ====================================== / email protected setreuid shellcode full description of how it was done and defines at...

solaris/sparc portbind (port 6666) 240 bytes

No description provided by source. / [email protected] portbind shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode= "\x9A\x1A\x40\x09" / xor %o1, %o1, %o5 / "\x90\x10\x20\x02" / mov PFINET, %o0 / "\x92\x10\x20\x02" / mo...

solaris/sparc setreuid/execve 56 bytes

No description provided by source. / [email protected] setreuid shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode = "\x90\x1A\x40\x09" / xor %o1, %o1, %o0 / "\x92\x1A\x40\x09" / xor %o1, %o1, %o1 / "\x82\x10\x20\xCA" /...

solaris/sparc portbind (port 6666) 240 bytes

Exploit for solaris/sparc platform in category shellcode ============================================ solaris/sparc portbind port 6666 240 bytes ============================================ / email protected portbind shellcode full description of how it was done and defines at...

solaris/sparc portbind port 6666 240 bytes

solaris/sparc portbind port 6666 240 bytes. Shellcode exploit for solarissparc platform / [email protected] portbind shellcode full description of how it was done and defines at http://www.telegenetic.net/sparc-shellcode.htm / char shellcode= "\x9A\x1A\x40\x09" / xor %o1, %o1, %o5 /...

[SA17554] Sun Solaris in.iked ISAKMP IKE Message Processing Denial of Service

TITLE: Sun Solaris in.iked ISAKMP IKE Message Processing Denial of Service SECUNIA ADVISORY ID: SA17554 VERIFY ADVISORY: http://secunia.com/advisories/17554/ CRITICAL: Moderately critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/ Sun Solaris ...

Solaris Command Shell, Bind TCP Inline

Listen for a connection and spawn a command shell This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 180 include Msf::Payload::Single include Msf::Payload::Solaris include...