Sun Solaris 'lpadmin'和'ppdmgr'本地拒绝服务漏洞

BUGTRAQ ID: 33269 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的lpadmin1M和ppdmgr1M存在安全，在特定情况下，允许本地攻击者使系统部分服务或者整个系统触发panic，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun OpenSolaris build snv91 Sun...

Sun OpenSolaris 'posix_fallocate(3C)'系统调用本地拒绝服务漏洞

BUGTRAQ ID: 33267 Sun OpenSolaris是一款开放源代码的操作系统。 Sun OpenSolaris包含的posixfallocate3C系统调用存在安全问题，允许本地攻击者使系统触发panic，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv90 Sun OpenSolaris build snv89 Sun OpenSolaris build snv88 Sun OpenSolaris build snv87 Sun OpenSolaris build snv85 Sun OpenSolaris build...

CVE-2009-0132: Undefined Security Weakness

Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service panic via a large integer value in the second argument aka nent argument...

[TKADV2009-001] Sun Solaris aio_suspend() Kernel Integer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Sun Solaris aiosuspend Kernel Integer Overflow Vulnerability Advisory ID: TKADV2009-001 Revision: 1.0 Release Date: 2009/01/08 Last Modified: 2009/01/08 Date Reported: 2008/09/15 Author: Tobias Klein tk at trapkit.de Affected Software: Solar...

Sun Solaris rpc.metad远程拒绝服务漏洞

BUGTRAQ ID: 28261 CVECAN ID: CVE-2008-1480 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 如果远程攻击者向Solaris提交了恶意RPC请求的话，就会导致rpc.metad1M崩溃，服务和Solaris卷标管理器（SVM）命令会失效，这是一种拒绝服务。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 - snv95 Sun Solstice Disk Suite 4.2.1 厂商补丁：...

CVE-2009-0069

CVE-2009-0069 affects the NFSv4 client in Sun Solaris 10 and OpenSolaris (pre-snV_102) where the kernel’s nfs4rename_persistent_fh function can be abused by local users to trigger a denial of service (recursive mutex_enter and panic). The issue is fixed by Sun patch 139466-04 (SPARC) and 139467-0...

CVE-2009-0069: Undefined Security Weakness

Unspecified vulnerability in the nfs4renamepersistentfh function in the NFS 4 aka NFSv4 client in the kernel in Sun Solaris 10 and OpenSolaris before snv102 allows local users to cause a denial of service recursive mutexenter and panic via unspecified vectors...

Solaris/x86 - setuid(0) + /bin/cat /etc/shadow Shellcode (61 bytes)

Solaris/x86 - setuid0 + /bin/cat /etc/shadow Shellcode 61 bytes. Shellcode exploit for Solarisx86 platform. Tags: Metasploit Framework MSF Name = John Babio Twitter = 3vi1john SunOS opensolaris 10 5.11 i86pc i386 i86pc setuid0 /bin/cat //etc/shadow char code=...

Design/Logic Flaw

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2008-5699

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2008-5699

CVE-2008-5699 affects Sun Solaris 10 and OpenSolaris (snv_50 through snv_104). The name service cache daemon (nscd) does not properly check permissions, allowing local users to gain privileges and access sensitive information via unspecified vectors. Connected sources corroborate Solaris patches ...

CVE-2008-5699: Undefined Security Weakness

The name service cache daemon nscd in Sun Solaris 10 and OpenSolaris snv50 through snv104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors...

CVE-2008-5689

tun in IP Tunnel in Solaris 10 and OpenSolaris snv01 through snv76 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference...

Design/Logic Flaw

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

Session fixation

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

Null pointer dereference

tun in IP Tunnel in Solaris 10 and OpenSolaris snv01 through snv76 allows local users to cause a denial of service panic and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference...

CVE-2008-5689

CVE-2008-5689 affects Solaris 10/OpenSolaris (SNV 01–SNV 76) via the tun/tunnel SIOCGTUNPARAM IOCTL. The underlying issue is a NULL pointer dereference triggered by a crafted IOCTL, allowing local users to cause a denial of service (panic) and potentially execute arbitrary code. Affected componen...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

[TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference Advisory ID: TKADV2008-015 Revision: 1.0 Release Date: 2008/12/17 Last Modified: 2008/12/17 Date Reported: 2007/09/04 Author: Tobias Klein tk at trapkit.de Affected Software:...

CVE-2008-5690: Undefined Security Weakness

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...