Solaris sadmind adm_build_path - Remote Buffer Overflow (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sun Solaris...

Solaris 2.6 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...

Solaris 5.8 (x86) : 109414-09

Solstice AdminSuite 3.0.1x86: NIS+ compat passwd autohome rights. Date this patch was last updated by Sun : May/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 2.6 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

Solaris 5.8 (x86) : 108881-11

Solstice AdminSuite 3.0.1x86: Auditing compat mode passwd autohom. Date this patch was last updated by Sun : May/08/03 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 7 (sparc) : 104468-20

The remote host is missing Sun Security Patch number 104468-20 Solstice AdminSuite 2.3/AutoClient 2.1: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 06:28:21 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This scri...

Solaris 2.5.1 (i386) : 104469-20

The remote host is missing Sun Security Patch number 104469-20 Solstice AdminSuite 2.3x86/AutoClient 2.1x86: y2000 NIS+ BSM. Date this patch was last updated by Sun : Thu Nov 17 07:35:39 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ Thi...

CVE-1999-1428

The CVE-1999-1428 entry affects Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. The vulnerability is a local privilege escalation in the Database Manager, which runs with setgid bin privileges; successful exploitation would grant elevated privileges to local users. The underlying issue is t...

CVE-1999-1426

The CVE-1999-1426 entry describes a local privilege impact in Solaris Solstice AdminSuite 2.1, where the updater for the NIS database follows symbolic links, allowing a local user to overwrite arbitrary files. The provided documents do not specify affected build versions beyond AdminSuite 2.1, no...

CVE-1999-1427

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges...

CVE-1999-1427

Affected software: Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2. Vulnerability: insecure creation of lock files. Root cause: insecure lock file handling allows local users to gain root privileges. Impact: local privilege escalation to root on affected systems. Remediation: not provided in...

CVE-1999-1428

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges...

CVE-1999-1426

Solaris Solstice AdminSuite AdminSuite 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files...

CVE-1999-1424

Technical details (affected products/versions/root cause/mitigation) are not provided in the supplied connected documents; monitor for updates.

CVE-1999-1424

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...

CVE-1999-1425

Solaris Solstice AdminSuite AdminSuite 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd...

CVE-1999-1425

CVE-1999-1425 affects Solaris Solstice AdminSuite (AdminSuite) 2.1. The documented issue is that NIS map source files have incorrect write permissions, enabling local users to modify /etc/passwd and potentially gain privileges. The connected documents do not expand on root cause beyond the stated...

Sun Solaris sadmind buffer overflow in amsl_verify when requesting NETMGT_PROC_SERVICE

Overview The sadmind program can be used to perform distributed system administration operations remotely using RPC. A stack buffer overflow in sadmind may be exploited by a remote attacker to execute arbitrary instructions and gain root access. Description The sadmind program is installed by...

CVE-1999-1427

Solaris Solstice AdminSuite AdminSuite 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges...

CVE-1999-1424

Solaris Solstice AdminSuite AdminSuite 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries...