Java socket connection to any local port via LiveConnect — Mozilla

Security researcher Gregory Fleischer demonstrated that web content fetched via the jar: protocol can use Java via LiveConnect to open socket connections to arbitrary ports on the user's machine "localhost". The issue is caused by improper parsing of the content origin passed from the browser to...

Cross site request forgery (csrf)

rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service daemon crash via a malformed RPC request...

CVE-2008-1480

rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service daemon crash via a malformed RPC request...

CVE-2008-1480

The CVE-2008-1480 issue affects Sun Solaris/Oracle Solaris systems with the rpc.metad daemon. The vulnerable component is rpc.metad (usr/sbin/rpc.metad on Solaris 9/10), where a malformed RPC request can trigger a denial-of-service (daemon crash). Connected advisories indicate fixed patches: 1385...

CVE-2008-1480

rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service daemon crash via a malformed RPC request...

Sun Solaris rpc.ypupdated code execution

Insufficient RPC requests filtering...

[EXPL] Sun Solaris rpc.ypupdated Arbitrary Command Execution (Exploit)

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Sun Solaris 10 - 'rpc.ypupdated' Remote Code Execution

Sun Solaris = 10 rpc.ypupdated Remote Root Exploit https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/20259.tar.gz 2008-ypk2008.tar.gz milw0rm.com 2008-03-20...

Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit

No description provided by source. ypk.c: /update: kcope/year2008/tested on SunOS 5.10// KEYSERV/YPUPDATED SunOS 4.1.3/RPC SERVICES ...

Sun Solaris 10 - rpc.ypupdated Remote Code Execution

Sun Solaris 10 - rpc.ypupdated Remote Code Execution Sun Solaris = 10 rpc.ypupdated Remote Root Exploit https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/5282.tar.gz 2008-ypk2008.tar.gz milw0rm.com 2008-03-20...

Sun Solaris <= 10 rpc.ypupdated Remote Root Exploit

Exploit for solaris platform in category remote exploits =================================================== Sun Solaris = 10 rpc.ypupdated Remote Root Exploit =================================================== Sun Solaris = 10 rpc.ypupdated Remote Root Exploit...

Design/Logic Flaw

A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshdconfig files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors...

CVE-2008-1369

A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshdconfig files that configure root logins in a manner unintended by the vendor, which allows remote attackers to gain privileges via unspecified vectors...

CVE-2008-1369

The CVE describes a misconfiguration in the Sun SPARC Enterprise T5120 and T5220 ships with a Solaris 10 image where /etc/default/login and /etc/ssh/sshd_config enable root logins in a way not intended by the vendor. This vulnerability allows remote attackers to gain privileges via unspecified ve...

Sun Solaris Cluster service rpc.metad DoS

Cradsh on malformed RPC request...

Authentication flaw

Unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System JDS, when using the GNOME On-Screen Keyboard GOK, allows local users to bypass authentication via unknown vectors that cause the screen saver to crash...

CVE-2008-1356

Unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System JDS, when using the GNOME On-Screen Keyboard GOK, allows local users to bypass authentication via unknown vectors that cause the screen saver to crash...

CVE-2008-1356

Unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System JDS, when using the GNOME On-Screen Keyboard GOK, allows local users to bypass authentication via unknown vectors that cause the screen saver to crash...

CVE-2008-1356

CVE-2008-1356 involves an unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System (JDS) when GNOME On-Screen Keyboard is used, enabling local users to bypass authentication by causing the screen saver to crash. The connected Nessus patches indicate xscreensaver-related fix...

Solaris 8 (sparc) : 136987-03

Sun Java Web Console 3.0.2: Security fixes. Date this patch was last updated by Sun : Jun/11/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...