Solaris 10 (sparc) : 152649-02 : dtappgather Arbitrary Directory Creation Local Privilege Escalation (EXTREMEPARR)

The remote Solaris host is missing patch number 152649-02. It is, therefore, affected by a local privilege escalation vulnerability in the dtappgather binary due to improper handling of user-supplied arguments. A local attacker can exploit this, via a specially crafted command, to manipulate file...

Solaris 7 < 11 (SPARC/x86) - 'EXTREMEPARR' dtappgather Privilege Escalation

!/bin/ksh Exploit PoC reverse engineered from EXTREMEPARR which provides local root on Solaris 7 - 11 x86 & SPARC. Uses a environment variable of setuid binary dtappgather to manipulate file permissions and create a user owned directory anywhere on the system as root. Can then add a shared object...

ShadowBrokers Dump More Equation Group Hacks, Auction File Password

The mysterious ShadowBrokers, long thought to have given up their cause, released on Saturday additional hacking tools allegedly belonging to the Equation Group, along with the password guarding the original set of exploits the group planned to auction off. The password was at the tail end of a...

Solaris 10 (sparc) : 152510-06 (deprecated)

SunOS 5.10: Tomcat 8 patch. Date this patch was last updated by Sun : Sep/06/17 This plugin has been deprecated and either replaced with individual 152510 patch-revision plugins, or deemed non-security related. File data solaris10152510.nasl...

Multi-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers: GEF

Multi-Architecture GDB Enhanced Features for Exploiters & Reverse-Engineers GEF is a kick-ass set of commands for X86, ARM, MIPS, PowerPC and SPARC to make GDB cool again for exploit dev. It is aimed to be used mostly by exploiters and reverse-engineers, to provides additional features to GDB usi...

CVE-2017-3242

Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...

CVE-2017-3242

Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...

Buffer overflow

Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...

CVE-2017-3242

CVE-2017-3242 affects Oracle VM Server for Sparc (LDOM Manager subcomponent). Affected: 3.2 and 3.4. Vulnerability allows a low-privileged user with logon to the infrastructure to compromise the server; successful attacks require user interaction and may cause a hang or frequent crashes (partial/...

CVE-2017-3242

Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...

CVE-2017-3242

Vulnerability in the Oracle VM Server for Sparc component of Oracle Sun Systems Products Suite subcomponent: LDOM Manager. Supported versions that are affected are 3.2 and 3.4. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM Server...

Oracle VM Server for Sparc Denial of Service Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Oracle VM Server for SPARC formerly known as Sun Logical Domains is a SPARC virtual machine hypervisor used to run multiple simultaneous OS instances on a single SPARC T-Series server. VM Server for SPARC...

Solaris 10 (sparc) : 138352-06 (deprecated)

X11 6.6.2: fontconfig patch. Date this patch was last updated by Sun : Apr/27/17 This plugin has been deprecated and either replaced with individual 138352 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (sparc) : 147219-01 (deprecated)

SunOS 5.10: libgphoto2.so.2.0.3 patch. Date this patch was last updated by Sun : Jan/17/12 This plugin has been deprecated and either replaced with individual 147219 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The Linux-image-2.6.26-1-vserver-sparc64 package from the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.18-5-all-sparc package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The Linux-headers-2.6.26-2-all-sparc package on the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information

Multiple vulnerabilities in the linux-headers-2.6.24-etchnhalf.1-all-sparc package of the Debian GNU/Linux operating system. Its operation may lead to violations of confidentiality, integrity, and accessibility of protected information...

Vulnerabilities of the Debian GNU/Linux operating system that allow a remote attacker to compromise the accessibility of protected information

The Linux-headers-2.6.18-6-all-sparc package of the Debian GNU/Linux operating system has multiple vulnerabilities. Exploitation of these vulnerabilities may lead to a violation of the accessibility of protected information. These vulnerabilities can be exploited remotely...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The multiple vulnerabilities in the linux-headers-2.6.26-1-all-sparc package of the Debian GNU/Linux operating system may lead to breaches of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...