CVE-2009-3183

CVE-2009-3183 affects SunOS/Solaris environments where the heap-based buffer overflow occurs in the w (and whodo) component. Concrete details in connected docs show affected products/versions: Solaris 8 (sparc/x86) and Solaris 10 (sparc/x86) with OpenSolaris prior to snv_124; the issue enables lo...

Solaris 9 (x86) : 142190-01

StarOffice 9 Solarisx86: Update 3 requires Update 2. Date this patch was last updated by Sun : Sep/11/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc...

Solaris 8 (sparc) : 142188-01

StarOffice 9 Solaris: Update 3 requires Update 2. Date this patch was last updated by Sun : Sep/11/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...

Solaris 8 (sparc) : 142189-01

StarSuite 9 Solaris: Update 3 requires Update 2. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; i...

Sun Solaris lx Branded域本地拒绝服务漏洞

Bugraq ID: 36340 Sun Solaris是一款商业性质的操作系统。 Sun Solaris lx branded域存在安全未明安全问题，本地非特权用户可使运行在64位模式的Solaris x86 Intel系统崩溃。 Sun Solaris 10x86 Sun OpenSolaris build snv99 Sun OpenSolaris build snv98 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris build...

CVE-2009-3164

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

Design/Logic Flaw

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

CVE-2009-3164

Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv122, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo frame...

CVE-2009-3164

CVE-2009-3164 affects Sun Solaris 10 and OpenSolaris (SNV 01–82, 111–122) when using a Cassini GigaSwift Ethernet Adapter. It is a consequence of an incomplete fix for CVE-2009-2136 in the IPv6/TCP-IP stack, enabling remote attackers to trigger a denial of service (kernel panic) via jumbo frames....

Solaris 10 (x86) : 142285-01

SunOS 5.10x86: w and whodo patch. Date this patch was last updated by Sun : Sep/09/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

CVE-2009-3100

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 9 and 10, OpenSolaris snv109 through snv122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service system hang by locking the screen and then attempting to launch an...

Design/Logic Flaw

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 9 and 10, OpenSolaris snv109 through snv122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service system hang by locking the screen and then attempting to launch an...

Design/Logic Flaw

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3101

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

xml-security-1.3.0-1jpp.ep1.*: XMLDsig HMAC-based signatures spoofing and authentication bypass

The design of the W3C XML Signature Syntax and Processing XMLDsig recommendation, as implemented in products including 1 the Oracle Security Developer Tools component in Oracle Application Server 10.1.2.3, 10.1.3.4, and 10.1.4.3IM; 2 the WebLogic Server component in BEA Product Suite 10.3, 10.0...

Sun Java System Directory Server 'ns-slapd'拒绝服务漏洞

Bugraq ID: 36286 Sun Java System Directory Server是一款Java企业系统的一个组件，为企业管理大量用户信息提供用户管理基础架构。 Sun Java System Directory Server 'ns-slapd'存在拒绝服务攻击，远程攻击者可以利用漏洞使服务程序崩溃。 目前没有详细漏洞细节提供。 Sun Java System Directory Server Enterprise Edition 6.0 目前没有解决方案提供：...

Null pointer dereference

The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv41 through snv122, when Network Cache Accelerator NCA logging is enabled, allows remote attackers to cause a denial of service panic via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7chttplog...

CVE-2009-3000

The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv41 through snv122, when Network Cache Accelerator NCA logging is enabled, allows remote attackers to cause a denial of service panic via unspecified web-server traffic that triggers a NULL pointer dereference in the nl7chttplog...

CVE-2009-2972

in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service memory consumption via unspecified vectors that trigger a "fork/exec bomb."...

CVE-2009-2972

CVE-2009-2972 affects Sun Solaris 8/9; the in.lpd print service is vulnerable to a remote fork/exec() bomb that can cause higher memory usage and denial of service. Relevant patches exist: Solaris 8 (sparc) 109320-22 and 109321-22 (x86); Solaris 9 114980-31. No exploitation details are provided i...