9002 matches found
[SA14037] Sun Solaris UDP End Point Handling Denial of Service
TITLE: Sun Solaris UDP End Point Handling Denial of Service SECUNIA ADVISORY ID: SA14037 VERIFY ADVISORY: http://secunia.com/advisories/14037/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun Solaris 9...
Sun Java JRE Plug-in Capability Arbitrary Package Access
The remote host is using a vulnerable version of Sun Java Runtime Plug-in, a web browser addon used to display Java applets. Two security issues have been reported in the remote version of this product : - An untrusted applet may escalate its privileges in order to read, write or execute files on...
Sun Java plugin sandbox protection bypass
It's possible to break sandbox protection and access local files and applications...
[SA13918] Sun Java Plug-In Two Vulnerabilities
TITLE: Sun Java Plug-In Two Vulnerabilities SECUNIA ADVISORY ID: SA13918 VERIFY ADVISORY: http://secunia.com/advisories/13918/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Sun Java SDK 1.4.x http://secunia.com/product/1661/ Sun Java SDK 1.3.x...
CVE-2004-1352
Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code...
CVE-2004-1352
CVE-2004-1352 identifies a buffer overflow in the Solaris ping daemon affecting Sun Solaris versions 7 through 9. The vulnerability enables local users to execute arbitrary code due to the overflow in the ping component. The CVE description explicitly states local code execution as the impact. No...
CVE-2004-1357
The Secure Shell SSH Daemon SSHD in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities...
CVE-2004-1350
Multiple buffer overflows in Sun Java System Web Proxy Server formerly Sun ONE Proxy Server 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests...
CVE-2004-1355
Technical details about CVE-2004-1355 are not publicly available in the provided documents; monitor for updates.
CVE-2004-1345
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager ESM 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access...
CVE-2004-1356
Technical details about CVE-2004-1356 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official sources.
CVE-2004-1360
Unknown vulnerability in convfix in Sun Solaris 7 through 9, when invoked by convlpd, allows local users to overwrite arbitrary files...
CVE-2004-1359
CVE-2004-1359 affects Sun Solaris with uucp on versions 2.6, 7, 8, and 9. The vulnerability arises from multiple buffer overflows in uucp, allowing local users to execute arbitrary code as the uucp user. The connected documents confirm the affected component and the local-privilege impact; explic...
CVE-2004-1360
The vulnerability CVE-2004-1360 concerns Sun Solaris versions 7–9, where the conv_fix function is exposed via conv_lpd. The root cause, as described, allows local users to overwrite arbitrary files, indicating a local-privilege/path-traversal like impact on file integrity. The sources provided (N...
CVE-2004-1358
The patches 1 114332-08 and 2 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module BSM, which allows attackers to avoid having their activity logged...
CVE-2004-1346
CVE-2004-1346 affects Sun Solaris Volume Manager (SVM) on Solaris 9. The issue allows local users to trigger a kernel panic via a malformed probe request to the SVM, constituting a local denial-of-service. Root cause details are limited in the provided documents; no publicly disclosed exploit vec...
CVE-2004-1357
The CVE describes a flaw in the Sun Solaris 9 SSHD where IP addresses are not properly logged when ListenAddress is configured to 0.0.0.0. The affected component is the SSH Daemon (SSHD) for Solaris 9. The underlying issue is improper logging of source addresses, which can help remote attackers o...
CVE-2004-1353
Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control RBAC, allows local users to execute certain commands with additional privileges...
CVE-2004-1350
Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6–3.6 SP4 contains multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests. The issue affects the proxy server’s handling of input in its network-facing compon...