Design/Logic Flaw

The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit aka XSCFU or Service Processor, and have unspecified other impact...

CVE-2009-0171

The CVE-2009-0171 entry concerns Sun SPARC Enterprise M4000 and M5000 servers within a certain serial-number range. The issue allows remote attackers to use the manufacturing root password to log in to the eXtended System Control Facility Unit (XSCFU/Service Processor), enabling root access and r...

CVE-2009-0168

Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to a failure to "include all cache files," and improper handling of temporary files...

CVE-2009-0169

Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm...

CVE-2009-0169

CVE-2009-0169 affects Sun Java System Access Manager 7.1. The vulnerability allows a remote authenticated sub-realm administrator to escalate privileges by creating the amadmin account in the sub-realm and then logging in as amadmin in the root realm. The available data confirms an in-realm privi...

CVE-2009-0168

CVE-2009-0168 affects Sun Solaris 10 and OpenSolaris (snv_61–snv_106). The vulnerability in ppdmgr allows local denial of service due to improper handling of temporary/cache files and a failure to include all cache files. Public sources in the connected data confirm affected platforms (Solaris 10...

CVE-2008-5910

The CVE-2008-5910 entry concerns an unspecified vulnerability in txzonemgr of Sun OpenSolaris, described as a “Temporary file vulnerability.” Affected component: txzonemgr, Sun OpenSolaris. Root cause and impact are not fully detailed beyond “unknown impact” in the description, with the vulnerabi...

CVE-2008-5908

Unspecified vulnerability in the root/boot archive tool in Sun OpenSolaris has unknown impact and local attack vectors, related to a "Temporary file vulnerability," aka Bug ID 6653455...

CVE-2009-0170

Technical details about CVE-2009-0170 are not publicly available in the provided connected documents. Monitor for updates from vendors and advisories to determine affected products, impact, and fixes.

CVE-2009-0167

Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv61 through snv106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."...

CVE-2009-0171

The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit aka XSCFU or Service Processor, and have unspecified other impact...

CVE-2008-5908

CVE-2008-5908 concerns an unspecified vulnerability in the root/boot archive tool of Sun OpenSolaris, tied to a “Temporary file vulnerability” (Bug ID 6653455). Available sources indicate unknown impact and local attack vectors, with no concrete exploit details provided in the connected documents...

CVE-2008-5909

CVE-2008-5909: vulnerability in conv_lpd of Sun OpenSolaris related to improper handling of temporary files. Local access required with low complexity; potential impact on confidentiality, integrity and availability is stated as complete. Exploitation details and concrete remediation information ...

Re: Assurent VR - Oracle BEA WebLogic Server Apache Connector Buffer Overflow

Hello Assurent & Oracle, On Tue, 13 Jan 2009, [email protected] wrote: : Oracle BEA WebLogic Server Apache Connector Buffer Overflow : : Reference: http://www.bea.com/weblogic/server/ : : 2. Vulnerability Summary : : A remotely exploitable vulnerability has been discovered in t...

CVE-2009-0132

Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service panic via a large integer value in the second argument aka nent argument...

Integer overflow

Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service panic via a large integer value in the second argument aka nent argument...

CVE-2009-0132

Integer overflow in the aiosuspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service panic via a large integer value in the second argument aka nent argument...

CVE-2009-0131

The CVE-2009-0131 entry describes a local-denial-of-service vulnerability in the Sun OpenSolaris kernel: the UFS implementation (snv_29 to snv_90) can panic under the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call. Documents do not provide exploitati...

Sun Solaris 'lpadmin'和'ppdmgr'本地拒绝服务漏洞

BUGTRAQ ID: 33269 Sun Solaris是一款商业性质的操作系统。 Sun Solaris包含的lpadmin1M和ppdmgr1M存在安全，在特定情况下，允许本地攻击者使系统部分服务或者整个系统触发panic，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris build snv96 Sun OpenSolaris build snv95 Sun OpenSolaris build snv92 Sun OpenSolaris build snv91 Sun...

Sun OpenSolaris 'posix_fallocate(3C)'系统调用本地拒绝服务漏洞

BUGTRAQ ID: 33267 Sun OpenSolaris是一款开放源代码的操作系统。 Sun OpenSolaris包含的posixfallocate3C系统调用存在安全问题，允许本地攻击者使系统触发panic，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun OpenSolaris build snv90 Sun OpenSolaris build snv89 Sun OpenSolaris build snv88 Sun OpenSolaris build snv87 Sun OpenSolaris build snv85 Sun OpenSolaris build...