Code injection

Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller SC, the system console, and possibly the host OS, and cause a denial of service shutdown or reboot, via spoofed IP packets...

Design/Logic Flaw

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5685

Sun ScApp firmware versions 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms are affected. The vulnerability allows remote attackers to spoof IP packets to access the System Controller (SC), the system console, and possibly the host OS, potentially causing a denial of se...

CVE-2008-5690

The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv01 through snv104, allows local users to cause a denial of service authentication failure via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the...

CVE-2008-5690

CVE-2008-5690 affects Sun Solaris 8–10 and OpenSolaris builds; root cause is the pam_krb5 credential renewal mechanism introduced flaws in cache file permissions and missing credential storage in store_cred, enabling local users to cause authentication failure (DoS). Connected documents confirm a...

CVE-2008-5685

Sun ScApp firmware 5.18.x, 5.19.x, and 5.20.0 through 5.20.10 on Sun Fire and Netra platforms allows remote attackers to access the System Controller SC, the system console, and possibly the host OS, and cause a denial of service shutdown or reboot, via spoofed IP packets...

CVE-2008-5684

Unspecified vulnerability in the X Inter Client Exchange library aka libICE in Sun Solaris 8 through 10 and OpenSolaris before snv85 allows context-dependent attackers to cause a denial of service application crash, as demonstrated by a port scan that triggers a segmentation violation in the Gnom...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

[TKADV2008-015] Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Advisory: Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL pointer dereference Advisory ID: TKADV2008-015 Revision: 1.0 Release Date: 2008/12/17 Last Modified: 2008/12/17 Date Reported: 2007/09/04 Author: Tobias Klein tk at trapkit.de Affected Software:...

Sun Solaris DoS

SIOCGTUNPARAM IOCTL processing NULL pointer dereference...

Sun Solaris IP隧道参数空指针引用漏洞

BUGTRAQ ID: 32904 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的IP隧道实现中存在空指针引用漏洞，本地攻击者可以通过发送特制的SIOCGTUNPARAM IOCTL请求导致拒绝服务或执行任意内核态代码。 以下是inet/ip/ip.c中的有漏洞代码段： ... 26692 void 26693 ipprocessioctlipsqt ipsq, queuet q, mblkt mp, void arg 26694 ... 26717 1 ci.ciipif = NULL ... 26735 case TUNCMD: ... 2674...

Solaris 8 (sparc) : 138885-01

SunOS 5.8: rpc.ypupdated patch. Date this patch was last updated by Sun : Dec/02/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-5661

The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...

CVE-2008-5662

Multiple buffer overflows in Sun Java Wireless Toolkit WTK for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors...

Buffer overflow

Multiple buffer overflows in Sun Java Wireless Toolkit WTK for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors...

Null pointer dereference

The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...

CVE-2008-5662

CVE-2008-5662 relates to multiple buffer overflows in Sun Java Wireless Toolkit (WTK) for CLDC 2.5.2 and earlier. Root cause: multiple buffer overflow conditions that allow downloaded programs to execute arbitrary code. Affected product/version: Sun Java Wireless Toolkit with CLDC 2.5.2 and earli...

CVE-2008-5661

The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv47 through snv82, with certain patches installed, allows remote attackers to cause a denial of service panic via unknown vectors that trigger a NULL pointer dereference...

CVE-2008-5662

Multiple buffer overflows in Sun Java Wireless Toolkit WTK for CLDC 2.5.2 and earlier allow downloaded programs to execute arbitrary code via unknown vectors...

CVE-2008-5661

The CVE-2008-5661 issue affects Sun Solaris 10 and OpenSolaris (snv_47 through snv_82) where the IPv4 Forwarding feature can trigger a NULL pointer dereference via remote input, causing a denial of service (panic). The vulnerability is reported with patches installed on affected builds; the exact...