Sun Solaris虚拟网络终端服务守护程序未授权访问漏洞

Bugraq ID: 35502 Sun Solaris是一款商业性质的操作系统。 Solaris逻辑域的虚拟网络终端服务守护程序vntsd存在错误，允许控制域中的非特权用户获得对客户域控制台的访问。 目前没有详细漏洞细节提供。 Sun Solaris 10 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris build snv93 Sun OpenSolaris build snv92...

Sun Solaris sadmind RPC Request Buffer Overflow (CVE-2008-3869; CVE-2008-3870)

sadmind is a daemon used to control the servers running Sun Solaris operating system. A buffer overflow vulnerability was identified in the sadmind service within the Sun Solaris operating system. The vulnerability is triggered in sadmind when decoding request parameters. This can be exploited to...

Design/Logic Flaw

Multiple memory leaks in the 1 IP and 2 IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv67 through snv93, allow local users to cause a denial of service memory consumption via vectors related to the association of a DLENABMULTIREQ and b DLDISABMULTIREQ messages...

CVE-2009-2187

CVE-2009-2187 affects Sun Solaris 10 and OpenSolaris (snv_67–snv_93) where the kernel’s IP and IPv6 multicast stacks suffer memory leaks. The root cause involves leaks when processing DL_ENABMULTI_REQ and DL_DISABMULTI_REQ messages in conjunction with ARP traffic, enabling local users to cause de...

Sun Solaris Ultra-SPARC T2加密提供设备驱动本地拒绝服务漏洞

Bugraq ID: 35438 Sun Solaris是一款商业性质的操作系统。 Solaris Ultra-SPARC T2加密提供设备驱动存在内存泄漏问题，本地或者远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris build snv...

Solaris 10 (x86) : 122262-03

SunOS 5.10x86: SunFreeware ghostscript ma. Date this patch was last updated by Sun : Mar/01/10 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2012/04/05. C Tenable Network Security, Inc. if !...

Sun Solaris Cassini Gigabit-Ethernet设备驱动远程拒绝服务漏洞

Bugraq ID: 35439 Sun Solaris是一款商业性质的操作系统。 Solaris Cassini Gigabit-Ethernet设备驱动和Jumbo帧处理Solaris TCP/IP网络栈存在安全问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv82 Sun OpenSolaris build snv80 Sun OpenSolaris build snv78 Sun OpenSolaris build snv77 S...

Sun Solaris Event Port API多个本地拒绝服务漏洞

Bugraq ID: 35437 CNCAN ID：CNCAN-2009062203 Sun Solaris是一款商业性质的操作系统。 Solaris Event Port API存在竞争条件错误，本地攻击者可以利用漏洞使系统崩溃。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv99 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv94 Sun OpenSolaris...

CVE-2009-2136

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver aka n2cp in Sun Solaris 10, and OpenSolaris snv54 through snv112, allows context-dependent attackers to cause a denial of service memory consumption via unspecified vectors related to a large keylen value...

Authentication flaw

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

Race condition

Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv107 allow local users to cause a denial of service panic via unspecified vectors related to a race between the portdissociate and close functions...

CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver aka n2cp in Sun Solaris 10, and OpenSolaris snv54 through snv112, allows context-dependent attackers to cause a denial of service memory consumption via unspecified vectors related to a large keylen value...

CVE-2009-2136

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv01 through snv82 and snv111 through snv117, when a Cassini GigaSwift Ethernet Adapter aka CE interface is used, allows remote attackers to cause a denial of service panic via vectors involving jumbo...

CVE-2009-2136

CVE-2009-2136 affects Sun Solaris 10 and OpenSolaris (various snv builds) when the Cassini GigaSwift Ethernet Adapter interface is used. The issue is an unspecified vulnerability in the TCP/IP networking stack that allows a remote attacker to cause a denial of service (panic) via vectors involvin...

CVE-2009-2135

Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv107 allow local users to cause a denial of service panic via unspecified vectors related to a race between the portdissociate and close functions...

CVE-2009-2135

Technical details about CVE-2009-2135 are not publicly available in the provided connected documents; monitor for updates.

CVE-2009-2137

The CVE-2009-2137 issue is a memory leak in the Ultra-SPARC T2 crypto provider device driver (n2cp) on Sun Solaris 10 and OpenSolaris (snv_54–snv_112). The vulnerability allows context-dependent attackers to cause a denial of service through memory consumption triggered by very large keylen value...

Sun Java System Web Proxy Server Vulnerabilities (Windows)

This host has Sun Java Web Server running on Windows, which is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservxssvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ Sun Java System Web Server XSS Vulnerability Windows Authors: Sharath S Copyright: Copyrig...

Sun Java System Web Proxy Server Vulnerabilities (Windows)

This host has Sun Java Web Server running on Linux, which is prone to Cross-Site Scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsunjavasyswebservxssvulnlin.nasl 5158 2017-02-01 14:53:04Z mime $ Sun Java System Web Server XSS Vulnerability Linux Authors: Sharath S Copyright: Copyright ...