CVE-2004-1345

The CVE refers to Sun StorEdge Enterprise Storage Manager (ESM) 2.1 on Solaris 8/9 with an unknown vulnerability that allows local users granted the ESMUser role to escalate to root. The existing sources describe the vulnerability impact as local privilege escalation but do not provide concrete t...

CVE-2004-1358

The CVE-2004-1358 entry concerns Sun Solaris 9 where patches 114332-08 and 114929-06 disable the auditing functionality of the Basic Security Module (BSM). This degrades logging, allowing attackers to avoid activity logs. The vulnerability details specify that the affected component is the BSM au...

CVE-2004-1353

Technical details for CVE-2004-1353 are not publicly provided in the supplied documents. The records note an unknown LDAP vulnerability on Sun Solaris 8/9 with RBAC enabling local privilege escalation, but no concrete affected components, versions, or fixes are disclosed here. Monitor for updates.

[SA13803] Sun SMC GUI Account With Empty Password Creation Security Issue

TITLE: Sun SMC GUI Account With Empty Password Creation Security Issue SECUNIA ADVISORY ID: SA13803 VERIFY ADVISORY: http://secunia.com/advisories/13803/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun...

Sun Solaris SMC (Solaris Management Console) weak passwords

Under certain conditions user accouint configured with password aging is created with empty password...

Solaris 9 (sparc) : 112945-46

SunOS 5.9: wbem Patch. Date this patch was last updated by Sun : Aug/01/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1608...

Solaris 8 (x86) : 113750-02

SunOS 5.8x86: User Manager CLI Patch. Date this patch was last updated by Sun : Dec/22/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if descripti...

Solaris 9 (x86) : 114193-36

SunOS 5.9x86: wbem Patch. Date this patch was last updated by Sun : Aug/01/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 113749-02

SunOS 5.8: User Manager CLI Patch. Date this patch was last updated by Sun : Dec/22/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2004-0780

Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command line argument...

DEBIAN-CVE-2004-1951

xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the 1 audio.sunaudiodevice or 2 dxr3.devicename options in an MRL link...

CVE-2004-1394

The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the execattr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges...

CVE-2004-2759

Shared Sun StorEdge QFS and SAM-QFS file systems, as used in Utilization Suite 4.0 through 4.1 and Performance Suite 4.0 through 4.1, might allow local users to read portions of deleted files by accessing data within sparse files...

CVE-2004-2216

Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service crash via a malformed client certificate...

CVE-2004-2641

Unspecified vulnerability in Sun Fire 3800/4800/4810/6800, Sun Fire V1280, and Netra 1280 allows remote attackers to cause a denial of service system controller hang via IP Packets With Type of Service TOS Bits set...

CVE-2004-2306

Sun Solaris 7 through 9, when Basic Security Module BSM is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the auditwarn script, which might allow attackers to escape detection...

CVE-2004-1951

xine 1.x alpha, 1.x beta, and 1.0rc through 1.0rc3a, and xine-ui 0.9.21 to 0.9.23 allows remote attackers to overwrite arbitrary files via the 1 audio.sunaudiodevice or 2 dxr3.devicename options in an MRL link...

[SA13497] Sun Java Messaging Server Webmail Script Insertion Vulnerability

TITLE: Sun Java Messaging Server Webmail Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13497 VERIFY ADVISORY: http://secunia.com/advisories/13497/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Sun Java System Messaging Server 6.x...

Multiple Sun ONE bugs

Session ID disclosure, crossite scripting...

[SA13437] Sun Java System Web Server / Application Server Session ID Disclosure

TITLE: Sun Java System Web Server / Application Server Session ID Disclosure SECUNIA ADVISORY ID: SA13437 VERIFY ADVISORY: http://secunia.com/advisories/13437/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Sun Java System Web Server Sun ONE/iPlanet...