Solaris 10 (sparc) : 125533-19 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Gnome Trusted Extension. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Solaris 10 (x86) : 125534-19 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Gnome Trusted Extension. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Command injection

Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...

CVE-2009-3468

Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...

CVE-2009-3468

Multiple unspecified vulnerabilities in Common Desktop Environment CDE in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or bypass the Mandatory Access Control MAC policy via unknown vectors, related to a menu typo and the Style Manager...

CVE-2009-3468

CVE-2009-3468 pertains to Solaris 10 CDE 1.6. The vulnerability set, related to a menu typo and the Style Manager, allows local users to execute arbitrary commands or bypass MAC when Trusted Extensions is enabled. Concrete remediation is available: patch 139620-01 for Solaris 10 (SunOS) SPARC, wi...

CVE-2009-3433

Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...

CVE-2009-3432

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

Security feature bypass

Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...

CVE-2009-3433

Technical details about CVE-2009-3433 are not provided in the connected documents or initial description; information on affected components, root cause, and fixes is not publicly disclosed here. Monitor for updates.

CVE-2009-3432

CVE-2009-3432 affects Sun Solaris 10 and OpenSolaris (pre-sn v112) when using Xorg/Xnewt with RandR enabled. A vulnerability in xscreensaver could allow physically proximate attackers to read a locked screen via XRandR resize events. Affected patches are SunXScreensaver patches: Solaris 10 patche...

CVE-2009-3432

Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events...

CVE-2009-3433

Unspecified vulnerability in clsetup in the configuration utility in Sun Solaris Cluster 3.2 allows local users to gain privileges via unknown vectors...

Code injection

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

CVE-2009-3390

Multiple unspecified vulnerabilities in the 1 iscsiadm and 2 iscsitadm programs in Sun Solaris 10, and OpenSolaris snv28 through snv109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library...

CVE-2009-3390

Affected software: Sun Solaris 10 and OpenSolaris (snv_28 through snv_109). Vulnerable components: iscsiadm and iscsitadm utilities, with root cause related to the libima library. Impact: local users with certain RBAC execution profiles can gain privileges via unspecified vectors. Context: exploi...

Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit

/ camisado.c AKA Sun Solaris 10 RPC dmispd Remote Resource Consumption Exploit Jeremy Brown [email protected]//jbrownsec.blogspot.com//krakowlabs.com 09.24.2009 Another long night in ONC RPC fuzzing land... uname -a SunOS unknown 5.10 Generic139555-08 sun4u sparc SUNW,Ultra-510 svcadm restart...

Sun Solarsi dmispd DoS

Resource exhaustion in RPC-based service...

Sun Solaris 10 RPC dmispd DoS

Exploit for unknown platform in category dos / poc ============================= Sun Solaris 10 RPC dmispd DoS ============================= Title: Sun Solaris 10 RPC dmispd DoS CVE-ID: OSVDB-ID: Author: Jeremy Brown view source print? / camisado.c AKA Sun Solaris 10 RPC dmispd Remote Resource...

SuSE 11 Security Update : Sun Java 1.6.0 (SAT Patch Number 1163)

The Sun Java JRE /JDK 6 was updated to Update 15 fixing various security issues. - The audio system in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System properties by 1 untrusted applets and 2 Java...