Heap overflow

Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters...

CVE-2008-3869

Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters...

CVE-2008-3870

Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation...

CVE-2008-3870

CVE-2008-3870 describes a heap-based buffer overflow in sadmind on Sun Solaris 8 and 9 triggered by a crafted RPC request, enabling remote code execution. OpenVAS evidence links to Solaris updates for sadmind (e.g., 116453-03, 116454-03, 116455-02, 116442-02) as remediation. The provided document...

CVE-2008-3869

Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters...

CVE-2008-3869

CVE-2008-3869 describes a heap-based buffer overflow in the Solaris sadmind RPC request decoding, allowing remote code execution on Solaris 8 and 9. The vulnerability arises when parsing crafted RPC parameters, enabling arbitrary code execution without user interaction. Connected advisories (CPAI...

CVE-2008-3870

Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation...

Secunia Research: Sun Solaris "sadmind" Integer Overflow Vulnerability

====================================================================== Secunia Research 23/05/2009 - Sun Solaris "sadmind" Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Sun Solaris Secure Digital Slot Driver (sdhost(7D))本地代码执行漏洞

Bugraq ID: 35069 CNCAN ID：CNCAN-2009052504 Sun Solaris是一款商业性质的操作系统。 Sun Solaris Secure Digital slot driver sdhost7D存在安全漏洞，能访问内存卡设备的本地用户可破坏内核内存或内存卡内容导致数据丢失，或可能允许以内核上下文执行任意代码。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv108 Sun OpenSolaris build snv107 Sun OpenSolaris build snv106 Sun OpenSolaris build...

Sun Solaris sadmind守护程序多个远程溢出漏洞

BUGTRAQ ID: 35083 CVECAN ID: CVE-2008-3869,CVE-2008-3870 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的sadmind守护程序在为入站的sadmind请求分配内存时存在整数溢出，在解码某些请求参数时存在堆溢出。如果远程攻击者提交了畸形的RPC请求的话，就可以触发这些溢出，导致以root用户权限执行任意代码。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 临时解决方法： 如下禁用sadmind1M： 1...

Sun Solaris sadmind multiple security vulnerabilities

Integer overflow, buffer overflow...

CVE-2009-1763

Unspecified vulnerability in the Solaris Secure Digital slot driver aka sdhost in Sun OpenSolaris snv105 through snv108 on the x86 platform allows local users to gain privileges or cause a denial of service filesystem or memory corruption via unknown vectors...

Java JRE deploytk.dll ActiveX Control Multiple BOF Vulnerabilities

This host is installed with Java JRE Deployment Toolkit ActiveX and is prone to multiple buffer overflow vulnerabilities. OpenVAS Vulnerability Test $Id: secpodjavajreactvxctrlmultbofvuln.nasl 7699 2017-11-08 12:10:34Z santu $ Java JRE deploytk.dll ActiveX Control Multiple BOF Vulnerabilities...

Java JRE deploytk.dll ActiveX Control Multiple BOF Vulnerabilities

Java JRE Deployment Toolkit ActiveX is prone to multiple buffer overflow vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express 6 2005Q4 aka 6.2 and 6.3 allow remote attackers to inject arbitrary web script or HTML via 1 the abpersondisplayName parameter to uwc/abs/search.xml in the Add Contact implementation in the Personal Addres...

CVE-2009-1729

CVE-2009-1729 corresponds to multiple XSS flaws in Sun Java System Communications Express 6.2 (2005Q4) and 6.3. The vulnerabilities are in the Personal Address Book Add Contact path (uwc/abs/search.xml) via abperson_displayName and in UWCMain (uwc/base/UWCMain) via temporaryCalendars. Impact is c...

CORE-2009-0109 - Multiple XSS in Sun Communications Express

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS in Sun Communications Express 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:...

Core Security Technologies Advisory 2009.0109

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Multiple XSS in Sun Communications Express 1. Advisory Information Title: Multiple XSS in Sun Communications Express Advisory ID: CORE-2009-0109 Advisory URL:...