94 matches found
CVE-2006-1601
CVE-2006-1601 affects SunPlex Manager within Sun Cluster 3.1 (4/04 build). Local users with solaris.cluster.gui authorization could view arbitrary files via unspecified vectors. Connected documents confirm affected product and vulnerability type, but do not specify a valid exploit, exploitability...
CVE-2006-1601
Unspecified vulnerability in SunPlex Manager in Sun Cluster 3.1 4/04 allows local users with solaris.cluster.gui authorization to view arbitrary files via unspecified vectors...
[SA19444] Sun Cluster SunPlex Manager File Disclosure Vulnerability
TITLE: Sun Cluster SunPlex Manager File Disclosure Vulnerability SECUNIA ADVISORY ID: SA19444 VERIFY ADVISORY: http://secunia.com/advisories/19444/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: Local system SOFTWARE: Sun Cluster 3.x http://secunia.com/product/2595/...
Solaris Sun Cluster SunPlex Manager privilege escalation
User with solaris.cluster.gui authorization can access any local files...
CVE-2003-1563
Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters OPS/RAC allows local users to cause a denial of service cluster node panic or abort by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager DLM, possibly involving...
CVE-2001-0078
CVE-2001-0078 affects Sun Cluster 2.x via the component/feature named “in.mond.” The vulnerability arises from a symlink attack on the status file of a host running HA-NFS, allowing local users to read arbitrary files. Root cause: a symlink race condition in the status file handling. Impact: part...
CVE-2001-0077
The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations...
CVE-2001-0078
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...
CVE-2001-0077
CVE-2001-0077 concerns the clustmon service in Sun Cluster 2.x, which does not require authentication. This allows remote attackers to access sensitive information such as system logs and cluster configurations. The available connected documents confirm the vulnerability details (unauthenticated ...
sc.txt
Two Security Holes in Sun Cluster 2.x echo8 Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service...
CVE-2001-0077
The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system logs and cluster configurations...
CVE-2001-0078
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS...
Two Holes in Sun Cluster 2.x
Hole 1 ------- Summary ------- Sun Cluster 2.x Sun Microsystems' commercial high-availability product for Solaris leaks potentially sensitive information to local or remote users. Specifics --------- In a standard Sun Cluster install, there is a service called clustmon that runs on port 12000. It...
Дырки в Sun Cluster
Sun Cluster позволяет удаленному пользователю без авторизации обращаться к приложениям, обычно доступным только root, в сочетании с локальной уязвимостью позволяет локальным пользователям получить доступ на чтение к любым файлам...