Solaris 9 (x86) : 113999-06

SunOS 5.9x86: devfsadm Patch. Date this patch was last updated by Sun : Jun/02/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (x86) : 117714-17

SunOS 5.9x86: Sun GigaSwift Ethernet 1.0 driver patch. Date this patch was last updated by Sun : May/28/10 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 8 (sparc) : 119819-03

SunOS 5.8: /usr/lib/nfs/nfslogd patch. Date this patch was last updated by Sun : May/27/10 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Sun Solaris multiple security vulnerabilities

Crossite scripting in ftpd, DoS against file utilities, buffer overflow in LIBC functions...

Sun Solaris 10 ftpd Cross-site request forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 ftpd Cross-site request forgery Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 24.02.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/09 - - OpenSoalris 2009.06 Original URL:...

Sun Solaris 10 filesystem rm(1),find(1),etc, Denial-of-service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 filesystem rm1,find1,etc, Denial-of-service Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 17.04.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/09 Original URL:...

Sun Solaris 10 libc/*convert (*cvt) buffer overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 libc/convert cvt buffer overflow Author: Maksymilian Arciemowicz http://SecurityReason.com Date: - - Dis.: 15.04.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/9 Original URL:...

Sun Solaris多个libc库数字转换函数缓冲区溢出漏洞

BUGTRAQ ID: 40309 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris操作系统的libc库中所使用的econvert、ecvt、fcvt和gcvt等函数在执行数字转换操作时存在缓冲区溢出漏洞，攻击者提交恶意请求就可以触发这些溢出，导致执行任意指令。 Sun Solaris 10.0x86 Sun Solaris 10.0 厂商补丁： Sun --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sunsolve.sun.com/security - --- 1. Sun Solar...

Sun Solaris in.ftpd服务超长命令处理跨站请求伪造漏洞

BUGTRAQ ID: 40320 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris操作系统所使用的in.ftpd服务在将用户所提交的超长FTP命令拆分为多个命令时存在跨站请求伪造漏洞。如果再结合SITE CHMOD命令更改文件权限，攻击者就可以以管理权限执行任意FTP命令。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris 2009.06 厂商补丁： Sun --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Sun Solaris嵌套目录树处理本地拒绝服务漏洞

BUGTRAQ ID: 40319 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 本地用户可以通过对嵌套了深层目录树的文件系统执行rm1、find1等操作触发栈溢出，导致拒绝服务的情况。 Sun Solaris 10.0x86 Sun Solaris 10.0 厂商补丁： Sun --- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://sunsolve.sun.com/security perl -e '$a="X";for1..8000 ! -d $a and mkdir $a and chdir $a '...

Sun Solaris 10 libc/*convert Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 libc/convert cvt buffer overflow Author: Maksymilian Arciemowicz http://SecurityReason.com Date: - - Dis.: 15.04.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/9 Original URL:...

Sun Solaris 10 filesystem rm(1),find(1),etc Denial Of Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 filesystem rm1,find1,etc, Denial-of-service Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 17.04.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/09 Original URL:...

Sun Solaris 10 ftpd Cross Site Request Forgery

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Sun Solaris 10 ftpd Cross-site request forgery Author: Maksymilian Arciemowicz SecurityReason.com Date: - - Dis.: 24.02.2010 - - Pub.: 21.05.2010 Affected Software: - - Sun Solaris 10 10/09 - - OpenSoalris 2009.06 Original URL:...

Sun Solaris 10 - in.ftpd Long Command Handling Security

Sun Solaris 10 - in.ftpd Long Command Handling Security source: https://www.securityfocus.com/bid/40320/info Sun Solaris 'in.ftpd' FTP server is prone to a security vulnerability that allows attackers to perform cross-site request-forgery attacks. An attacker can exploit this issue to perform...

Sun Solaris 10 - 'in.ftpd' Long Command Handling Security

source: https://www.securityfocus.com/bid/40320/info Sun Solaris 'in.ftpd' FTP server is prone to a security vulnerability that allows attackers to perform cross-site request-forgery attacks. An attacker can exploit this issue to perform unauthorized actions by enticing a logged-in user to visit ...

Sun Solaris 10 - Nested Directory Tree Local Denial of Service

source: https://www.securityfocus.com/bid/40319/info Sun Solaris is prone to a local denial-of-service vulnerability. Exploiting this issue allows local users to cause denial-of-service conditions in certain filesystem commands. Sun Solaris 10 is affected, other versions may also be vulnerable...

Sun Solaris 10 - Nested Directory Tree Local Denial of Service

Sun Solaris 10 - Nested Directory Tree Local Denial of Service source: https://www.securityfocus.com/bid/40319/info Sun Solaris is prone to a local denial-of-service vulnerability. Exploiting this issue allows local users to cause denial-of-service conditions in certain filesystem commands. Sun...

Solaris 10 (sparc) : 142259-07

SunOS 5.10: sd patch. Date this patch was last updated by Sun : Aug/30/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0...

CA BrightStor ARCserve Backup Media Server SUN RPC Denial of Service (CVE-2007-2139)

Computer Associates BrightStor ARCserve Backup products offer data protection for distributed servers, clients, databases and applications. They provide centralized control over a series of distributed operations including Backup and Restore, Data Migration, and Threat Management. There exists a...

java-1.6.0-sun: Stack-based buffer overflow via a long file: URL argument (6854303)

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.127, and SDK and JRE 1.4.x before 1.4.224 allows remote attackers to execute arbitrary code via a long file: URL in a...