EUVD-2009-1170

Malware in sbrugna...

Joyent SmartOS dtrace Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...

PT-2011-1292

Name of the Vulnerable Software and Affected Versions Sun Solaris versions 10 OpenSolaris versions snv 39 through snv 67 Description The issue in the labeled networking implementation of Solaris Trusted Extensions allows remote authenticated users to bypass a Mandatory Access Control MAC policy...

CVE-2008-7300: Undefined Security Weakness

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...

Code injection

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

CVE-2009-1170

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

CVE-2009-1170

The CVE-2009-1170 entry concerns Sun OpenSolaris SNV 100–101. A local user with non-global-zone privileges can cause arbitrary code execution in the global zone when a global-zone user runs mdb on a non-global-zone process. The available documents describe the vulnerable condition and impact but ...

CVE-2009-1170

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

CVE-2009-1170: Undefined Security Weakness

Unspecified vulnerability in Sun OpenSolaris snv100 through snv101 allows local users, with privileges in a non-global zone, to execute arbitrary code in the global zone when a global-zone user is using mdb on a non-global zone process...

CVE-2007-0668

The CVE-2007-0668 entry covers Sun Solaris 10’s Loopback Filesystem (LOFS). Affected: LOFS in a non-global zone. Issue: local users can move and rename files within a read-only filesystem, which can cause a denial of service. Root cause: insufficient protection of file operations in LOFS enabling...