EUVD-2008-4988

Malware in sbrugna...

Sun Solstice AdminSuite sadmind Service adm_build_path Buffer Overflow (CVE-2008-4556)

Solstice AdminSuite is a set of applications for distributed system administration. sadmind is a daemon used by Solstice AdminSuite to control the servers running Sun Solaris operating system. A stack buffer overflow vulnerability has been reported in Solstice AdminSuite's sadmind. The...

Sun Solstice X.25本地拒绝服务漏洞

CNCAN ID：CNCAN-2008111104 Sun Solstice是一款企业级网络管理方案。 Sun Solstice X.25存在拒绝服务问题，本地攻击者可以利用漏洞使系统崩溃。 对"/dev/xty"有读权限的本地非特权用户利用Solstice X.2存在的缺陷可导致多CPU上的系统触发panic，造成拒绝服务攻击。 Solstice X.25 9.x 可参考如下补丁： X.25 9.2 for Solaris 8, 9 and 10 on SPARC:...

CVE-2008-5009

Race condition in the sxout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service panic via vectors involving reading the /dev/xty file...

Race condition

Race condition in the sxout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service panic via vectors involving reading the /dev/xty file...

CVE-2008-5009

Race condition in the sxout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service panic via vectors involving reading the /dev/xty file...

CVE-2008-5009

The CVE-2008-5009 issue is a race condition in the Sun Solstice X.25 9.2 s_xout kernel module that, on multi-CPU systems, can cause a local denial of service (panic) by reading the /dev/xty file. Public sources confirm the affected component and impact; exploit details are not provided beyond the...

Sun Solstice AdminSuite 'sadmind' 'adm_build_path()'远程栈缓冲区溢出漏洞

BUGTRAQ ID: 31751 CNCAN ID：CNCAN-2008101623 Sun Solstice AdminSuite是一款图形用户接口工具集，用于执行管理用户，组，主机，系统文件，打印机，磁盘，文件系统等。 Sun Solstice AdminSuite sadmind存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 问题函数admbuildpath当使用strcat函数追加用户提供的数据到基于栈的缓冲区时缺少充分过滤，导致缓冲区溢出，精心构建提交数据可以导致以守护进程上下文执行任意指令，导致系统入侵。 Sun Solstice AdminSuite...

Stack overflow

Stack-based buffer overflow in the admbuildpath function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request...

CVE-2008-4556

CVE-2008-4556 is a stack-based buffer overflow in the adm_build_path function of sadmind (Sun Solstice AdminSuite) on Solaris 8/9. The vulnerability allows remote attackers to execute arbitrary code via a crafted RPC request. Public references and connected data show that this has been exploited ...

CVE-2008-4556

Stack-based buffer overflow in the admbuildpath function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request...

CVE-2005-3659

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allows remote attackers to cause a denial of service nsrd service crash via a malforme...

CVE-2005-3658

Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause ...

CVE-2005-3659

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allows remote attackers to cause a denial of service nsrd service crash via a malforme...

CVE-2005-0357

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTHUNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID...

CVE-2005-0359

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...

CVE-2005-0359

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmapset and pmapunset commands, which allows remote attackers to 1 cause a denial of service by using pmapunset to un-register a NetWorker...