[RISE-2008001] Sun Solstice AdminSuite sadmind adm_build_path() Buffer Overflow Vulnerability

RISE-2008001 Sun Solstice AdminSuite sadmind admbuildpath Buffer Overflow Vulnerability http://risesecurity.org/advisories/RISE-2008001.txt Published: October 14, 2008 Updated: October 14, 2008 INTRODUCTION There exists a vulnerability within a function of the Sun Solstice AdminSuite sadmind, whi...

Solaris 7 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...

Solaris 2.5.1 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 5.8 (x86) : 108881-11

Solstice AdminSuite 3.0.1x86: Auditing compat mode passwd autohom. Date this patch was last updated by Sun : May/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 2.6 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 2.6 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...

Solaris 5.8 (x86) : 109414-09

Solstice AdminSuite 3.0.1x86: NIS+ compat passwd autohome rights. Date this patch was last updated by Sun : May/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

CVE-1999-1427

Affected software: Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. Vulnerability: insecure creation of lock files. Root cause: insecure lock file handling allows local users to gain root privileges. Impact: local privilege escalation to root on affected systems. Remediation: not provided in...

CVE-1999-1425

CVE-1999-1425 affects Solaris Solstice AdminSuite (AdminSuite) 2.1. The documented issue is that NIS map source files have incorrect write permissions, enabling local users to modify /etc/passwd and potentially gain privileges. The connected documents do not expand on root cause beyond the stated...

CVE-1999-1427

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges...

CVE-1999-1428

The CVE-1999-1428 entry affects Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. The vulnerability is a local privilege escalation in the Database Manager, which runs with setgid bin privileges; successful exploitation would grant elevated privileges to local users. The underlying issue is t...

CVE-1999-1424

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...

CVE-1999-1425

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-1424

Technical details (affected products/versions/root cause/mitigation) are not provided in the supplied connected documents; monitor for updates.

CVE-1999-1426

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-1999-1428

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges...

CVE-1999-1426

The CVE-1999-1426 entry describes a local privilege impact in Solaris Solstice AdminSuite 2.1, where the updater for the NIS database follows symbolic links, allowing a local user to overwrite arbitrary files. The provided documents do not specify affected build versions beyond AdminSuite 2.1, no...

Sun Solaris sadmind buffer overflow in amsl_verify when requesting NETMGT_PROC_SERVICE

Overview The sadmind program can be used to perform distributed system administration operations remotely using RPC. A stack buffer overflow in sadmind may be exploited by a remote attacker to execute arbitrary instructions and gain root access. Description The sadmind program is installed by...

CVE-1999-1427

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges...

CVE-1999-1424

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...