991 matches found
CVE-2009-2430
CVE-2009-2430 affects Sun Solaris 8, 9, 10 and OpenSolaris snv_01–snv_58 when Solaris Auditing is enabled. The vulnerability, described as an unspecified local privilege escalation in auditconfig exploitable by RBAC-enabled users, uses unknown attack vectors. Connected sources reference Solaris a...
Sun Solaris 'auditconfig(1M)'命令本地特权提升漏洞
Bugraq ID: 35501 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的auditconfig存在错误，如果Solaris审核系统启用，并且用户有指派的RBAC可执行配置文件，可允许以高特权执行任意命令。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris build snv58 Sun OpenSolaris build snv57 Sun...
Solaris Update for RBAC Feature 110386-04
Check for the Version of RBAC Feature OpenVAS Vulnerability Test Solaris Update for RBAC Feature 110386-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Solaris Update for RBAC Feature 110400-04
Check for the Version of RBAC Feature OpenVAS Vulnerability Test Solaris Update for RBAC Feature 110400-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Solaris Update for RBAC Feature 110386-04
Check for the Version of RBAC Feature OpenVAS Vulnerability Test Solaris Update for RBAC Feature 110386-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
Solaris Update for RBAC Feature 110400-04
Check for the Version of RBAC Feature OpenVAS Vulnerability Test Solaris Update for RBAC Feature 110400-04 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...
IBM AIX多个本地溢出及权限提升漏洞
BUGTRAQ ID: 32493 IBM AIX是一款商业性质的UNIX操作系统。 IBM AIX中的多个安全漏洞可能允许本地攻击者触发缓冲区溢出，以提升的权限执行任意操作。 1 /usr/sbin/ndp setuid root程序中存在缓冲区溢出。成功利用这个漏洞要求在运行netcd守护程序。 2 特权的/usr/sbin/autoconf6命令中存在缓冲区溢出。成功利用这个漏洞要求在使用RBAC且攻击者拥有aix.network.config.tcpip授权。 3 如果/etc/qconfig定义漏洞打印队列的话，特权/usr/bin/enq命令中的错误可能导致删除任意文件。 4...
CVE-2008-1940
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce usertransitiondeny and usertransitionallow rules for the 1 syssetfsuid and 2 syssetfsgid calls, which allows local users to bypass restrictions for those calls...
Design/Logic Flaw
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce usertransitiondeny and usertransitionallow rules for the 1 syssetfsuid and 2 syssetfsgid calls, which allows local users to bypass restrictions for those calls...
CVE-2008-1940
The vulnerability CVE-2008-1940 affects grsecurity RBAC before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2, where the RBAC feature fails to enforce user_transition_deny and user_transition_allow for the sys_setfsuid and sys_setfsgid calls. This allows local users to bypass restrictions on these calls. Th...
CVE-2008-1940
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce usertransitiondeny and usertransitionallow rules for the 1 syssetfsuid and 2 syssetfsgid calls, which allows local users to bypass restrictions for those calls...
grsecurity RBAC本地绕过安全限制漏洞
BUGTRAQ ID: 28889 grsecurity是一组Linux内核补丁，用于提高安全性。 grsecurity的基于角色访问控制（RBAC）系统在强制usertransitiondeny和usertransitionallow规则时存在漏洞，允许本地用户在调用syssetfsuid和syssetfsgid期间绕过这些规则的限制，执行非授权操作。 grsecurity grsecurity Kernel Patch 2.6 grsecurity grsecurity Kernel Patch 2.4 grsecurity ----------...
Sun Solaris 8 RBAC远程特权提升漏洞
Sun Solaris是一款商业性质的操作系统。 Sun Solaris 8 RBAC机制存在两个安全问题，远程攻击者可以利用漏洞通过role帐户获得对系统的未授权访问。 目前没有详细漏洞细节提供。 Sun Solaris 8x86 Sun Solaris 8 补丁下载： Sun Solaris 8x86 Sun 127034-01 http://sunsolve.sun.com/search/document.do?assetkey=1-21-127034-01-1 Sun Solaris 8 Sun 127033-01...
CVE-2007-4395
Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...
CVE-2007-4395
Technical details about CVE-2007-4395 are not publicly available in the provided connected documents. The OpenVAS entries and external references do not specify affected products, versions, root cause, or fixes. Monitor for updates.
Sun Solaris Format(1M)命令本地权限提升漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 由于Format1M命令中的安全漏洞，可能允许给予了“文件系统管理”RBAC配置文件（或任何允许用户以root权限运行format1M命令的自定义配置文件）以root用户权限执行任意代码。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：...
Sun Solaris文件系统管理RBAC配置文件命令执行漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 与“文件系统管理”配置文件相关的RBAC配置中存在安全漏洞，可能允许被分配了该配置文件的本地用户以root用户权限执行任意命令。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 从execattr4数据库删除对format命令的引用。但是，这会导致用户无法获得对format命令的特权访问。 厂商补丁： Sun ---...
CVE-2006-4319
Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format such as the "File System Management" RBAC profile to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307...
CVE-2006-4319
Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format such as the "File System Management" RBAC profile to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307...
CVE-2006-4306
Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control RBAC settings in the "File System Management" profile...