1182 matches found
CVE-2008-1940
The vulnerability CVE-2008-1940 affects grsecurity RBAC before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2, where the RBAC feature fails to enforce user_transition_deny and user_transition_allow for the sys_setfsuid and sys_setfsgid calls. This allows local users to bypass restrictions on these calls. Th...
CVE-2008-1940
The RBAC functionality in grsecurity before 2.1.11-2.6.24.5 and 2.1.11-2.4.36.2 does not enforce usertransitiondeny and usertransitionallow rules for the 1 syssetfsuid and 2 syssetfsgid calls, which allows local users to bypass restrictions for those calls...
grsecurity RBAC本地绕过安全限制漏洞
BUGTRAQ ID: 28889 grsecurity是一组Linux内核补丁，用于提高安全性。 grsecurity的基于角色访问控制（RBAC）系统在强制usertransitiondeny和usertransitionallow规则时存在漏洞，允许本地用户在调用syssetfsuid和syssetfsgid期间绕过这些规则的限制，执行非授权操作。 grsecurity grsecurity Kernel Patch 2.6 grsecurity grsecurity Kernel Patch 2.4 grsecurity ----------...
Sun Solaris 8 RBAC远程特权提升漏洞
Sun Solaris是一款商业性质的操作系统。 Sun Solaris 8 RBAC机制存在两个安全问题，远程攻击者可以利用漏洞通过role帐户获得对系统的未授权访问。 目前没有详细漏洞细节提供。 Sun Solaris 8x86 Sun Solaris 8 补丁下载： Sun Solaris 8x86 Sun 127034-01 http://sunsolve.sun.com/search/document.do?assetkey=1-21-127034-01-1 Sun Solaris 8 Sun 127033-01...
CVE-2007-4395
Multiple unspecified vulnerabilities in the Role Based Access Control RBAC functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain privileges via that role...
CVE-2007-4395
Technical details about CVE-2007-4395 are not publicly available in the provided connected documents. The OpenVAS entries and external references do not specify affected products, versions, root cause, or fixes. Monitor for updates.
Sun Solaris Format(1M)命令本地权限提升漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 由于Format1M命令中的安全漏洞，可能允许给予了“文件系统管理”RBAC配置文件（或任何允许用户以root权限运行format1M命令的自定义配置文件）以root用户权限执行任意代码。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁：...
Sun Solaris文件系统管理RBAC配置文件命令执行漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 与“文件系统管理”配置文件相关的RBAC配置中存在安全漏洞，可能允许被分配了该配置文件的本地用户以root用户权限执行任意命令。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 从execattr4数据库删除对format命令的引用。但是，这会导致用户无法获得对format命令的特权访问。 厂商补丁： Sun ---...
CVE-2006-4319
Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format such as the "File System Management" RBAC profile to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307...
CVE-2006-4319
Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format such as the "File System Management" RBAC profile to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307...
CVE-2006-4306
Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access Control RBAC settings in the "File System Management" profile...
CVE-2006-4306
CVE-2006-4306 concerns Solaris 8 and 9 prior to 2006-08-21. The NVD entry describes an unspecified vulnerability that allows local users to execute arbitrary commands, leveraging the default RBAC (Role-Based Access Control) settings in the File System Management profile. The precise vector is not...
[SA21581] Sun Solaris RBAC Profile Privilege Escalation Vulnerabilities
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
Design/Logic Flaw
The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...
CVE-2006-0228
The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...
CVE-2006-0228
The RBAC functionality in grsecurity before 2.1.8 does not properly handle when the admin role creates a service and then exits the shell without unauthenticating, which causes the service to be restarted with the admin role still active...
CVE-2006-0228
CVE-2006-0228 involves the RBAC helper in grsecurity prior to 2.1.8, where the admin role can inadvertently remain active after the admin creates a service and exits the shell without unauthenticating. This causes the service to restart with the admin role still active, giving elevated privileges...
CVE-2004-1353
Technical details for CVE-2004-1353 are not publicly provided in the supplied documents. The records note an unknown LDAP vulnerability on Sun Solaris 8/9 with RBAC enabling local privilege escalation, but no concrete affected components, versions, or fixes are disclosed here. Monitor for updates.
[SA12873] Sun Solaris LDAP and RBAC Privilege Escalation Vulnerability
TITLE: Sun Solaris LDAP and RBAC Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA12873 VERIFY ADVISORY: http://secunia.com/advisories/12873/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun Solari...