Sun Solaris NFS守护程序绕过安全限制漏洞

BUGTRAQ ID: 34062 CVECAN ID: CVE-2009-0873 Solaris是一款由Sun开发和维护的商业UNIX操作系统。 Solaris的NFS守护程序（nfsd）没有正确地实现多种安全模式组合，远程攻击者可以利用sec=sys和sec=krb5安全模式组合绕过预期的访问限制，读取或修改受限制的文件。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 - snv105 临时解决方法： 对NFS服务器所支持的安全模式使用相同的访问列表。...

CVE-2009-0874

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

CVE-2009-0877

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the 1 Full Name or 2 Subject field...

Design/Logic Flaw

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DTRPATH:$ORIGIN...

Race condition

Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allows local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors involving the time at which control is...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the 1 Full Name or 2 Subject field...

CVE-2009-0874

Multiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv94, allow local users to cause a denial of service process hang, or possibly bypass file permissions or gain kernel-context privileges, via vectors including ones relat...

CVE-2009-0876

Sun xVM VirtualBox for Linux (versions 2.0.0 – 2.1.4r42893) is affected by a local privilege-escalation flaw via a hardlink attack that preserves setuid/setgid bits, related to DT_RPATH:$ORIGIN. The issue, described across multiple sources, centers on filesystem manipulation allowing a non-privil...

CVE-2009-0874

CVE-2009-0874 concerns multiple unspecified vulnerabilities in the Doors subsystem of the kernel on Solaris 8–10 and OpenSolaris before snv_94. The flaws enable local users to cause a denial of service (process hang) and, potentially, bypass file permissions or gain kernel-context privileges. Doc...

CVE-2009-0877

Multiple cross-site scripting XSS vulnerabilities in Sun Java System Communications Express allow remote attackers to inject arbitrary web script or HTML via the 1 Full Name or 2 Subject field...

CVE-2009-0877

The CVE-2009-0877 entry describes multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Communications Express. The affected component is the web interface of Sun Java System Communications Express, where attackers can inject arbitrary web script or HTML via the Full Name or Subj...

CVE-2009-0876

Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/setgid bits on Linux, related to DTRPATH:$ORIGIN...

CVE-2009-0875

CVE-2009-0875 describes a race condition in the kernel Doors subsystem affecting Sun Solaris 8–10 and OpenSolaris before snv_94. The vulnerability stems from how control is transferred from a caller to a door server, enabling a local user to cause a process hang (denial of service) and, in some c...

Sun Java System Communications Express [HTML Injection]

Hello, I have found a HTML Injection vulnerability in Sun Java™ System Communications Express, a web client that provides an integrated web-based communication and collaboration client to the Sun Java Communications Suite. It consists of three client modules - Calendar, Address Book, and Mail. He...

CVE-2009-0872

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...

CVE-2009-0873

The NFS daemon aka nfsd in Sun Solaris 10 and OpenSolaris before snv106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys a...

Design/Logic Flaw

The NFS daemon aka nfsd in Sun Solaris 10 and OpenSolaris before snv106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys a...

Design/Logic Flaw

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...

CVE-2009-0872

CVE-2009-0872 affects Sun Solaris 10 and OpenSolaris builds prior to snv_111, where the NFS server fails to properly enforce AUTH_NONE (sec=none) when used with other security modes. This allows remote attackers to bypass access controls and read/modify files by abusing a combination of AUTH_NONE...

CVE-2009-0872

The NFS server in Sun Solaris 10, and OpenSolaris before snv111, does not properly implement the AUTHNONE aka sec=none security mode in combination with other security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a...