9004 matches found
Sun Solaris TCP SYN Flood远程拒绝服务漏洞
BUGTRAQ ID: 29089 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的TCP实现中的安全漏洞可能允许远程非特权用户在TCP SYN洪水的情况下导致接受新的网络连接速度变慢，可能无法创建网络连接便已超时。此外，单处理器系统还可能由于高CPU使用率而总体变慢，导致整个系统拒绝服务。 这个漏洞影响ndd1M可调节值tcpconnreqmaxq0明显高于默认值1024的主机。该值越大，漏洞被利用后对主机的影响越大。如果这个漏洞被利用，控制台中可看到以下消息： WARNING: High TCP connect timeout rate! Syst...
[SECURITY] Fedora 7 Update: tkimg-1.3-0.8.20080505svn.fc7
This package contains a collection of image format handlers for the Tk photo image type, and a new image type, pixmaps. The provided format handlers include bmp, gif, ico, jpeg, pcx, png, ppm, ps, sgi, sun, tga, tiff, xbm, and xpm...
Code injection
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors...
CVE-2008-2121
The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service CPU consumption and new connection timeouts via a TCP SYN flood attack...
CVE-2008-2120
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors...
CVE-2008-2120
Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to obtain source code of JSP files via unknown vectors...
CVE-2008-2120
CVE-2008-2120 is an information-disclosure vulnerability in Sun Java System Application Server 7 (2004Q2) before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 that allows remote attackers to obtain the source code of JSP files via unknown vectors. Affected components are...
CVE-2008-2121
The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service CPU consumption and new connection timeouts via a TCP SYN flood attack...
CVE-2008-2121
CVE-2008-2121 affects the TCP implementation in Sun Solaris 8, 9, and 10, allowing remote attackers to cause a denial of service via a TCP SYN flood attack, resulting in CPU consumption and new-connection timeouts. Public entries confirm the vulnerability in Solaris TCP and its CVE listing. The c...
openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5225)
Sun Java was updated to 1.6.0u6 to fix several bugs and potentially also security problems. Sun has however not published any details regarding Security Vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
Solaris 10 (sparc) : 128165-02 (deprecated)
Sun Ray Kiosk Session Service version 4.0 Patch Update for SRSS. Date this patch was last updated by Sun : Jul/09/09 This plugin has been deprecated and either replaced with individual 128165 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security,...
Solaris 10 (sparc) : 128328-01
SunOS 5.10: usbms patch. Date this patch was last updated by Sun : Apr/18/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...
Solaris 10 (x86) : 128295-02
SunOS 5.10x86: rpcmod patch. Date this patch was last updated by Sun : Apr/18/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom...
Design/Logic Flaw
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig...
CVE-2008-2112
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig...
CVE-2008-2112
CVE-2008-2112 affects Sun Ray Kiosk Mode 4.0. The vulnerability allows local and remote authenticated Sun Ray administrators to gain root privileges through unknown/utconfig-related vectors. The exact root cause and exploited components are not fully detailed in the provided documents, but the im...
CVE-2008-2112
Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown vectors related to utconfig...
Sun Solaris SCTP协议处理远程拒绝服务漏洞
BUGTRAQ ID: 29024,29023 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris处理畸形SCTP报文时存在漏洞，如果远程攻击者向Solaris发送了特制的SCTP报文的话，就可能导致系统忙碌，或消耗过多的网络通讯，造成拒绝服务的情况。 Sun Solaris 10x86 Sun Solaris 10.0 Sun --- Sun已经为此发布了一个安全公告（Sun-Alert-236321）以及相应补丁: Sun-Alert-236321：A Security Vulnerability in Solaris 10 Involving the...
Code injection
Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service CPU consumption and network traffic amplification via a crafted SCTP packet...