CVE-2008-5111

CVE-2008-5111 affects Sun Solaris 10 and OpenSolaris (snv_57 through snv_91) when InfiniBand hardware is not installed. The vulnerability is described as an unspecified issue in the socket function, related to socksdpv_close, that can allow local users to cause a denial of service (panic). Exploi...

CVE-2008-5099

Sun Logical Domain Manager aka LDoms Manager or ldm 1.0 through 1.0.3 displays the value of the OpenBoot PROM OBP security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l"...

CVE-2008-5098

Cross-site scripting XSS vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-2904...

CVE-2008-5099

Sun Logical Domain Manager aka LDoms Manager or ldm 1.0 through 1.0.3 displays the value of the OpenBoot PROM OBP security-password variable in cleartext, which allows local users to bypass the SPARC firmware's password protection, and gain privileges or obtain data access, via the "ldm ls -l"...

CVE-2008-5099

CVE-2008-5099 affects Sun Logical Domain Manager (LDoms) 1.0–1.0.3. The vulnerability allows local users to read the OBP security-password in cleartext via the improper use of the ldm ls -l command, bypassing SPARC firmware password protection and potentially gaining privileges or data access. Re...

CVE-2008-5098

Cross-site scripting XSS vulnerability in Sun Java System Messaging Server 6.2 and 6.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2007-2904...

CVE-2008-5098

CVE-2008-5098 is an XSS vulnerability in Sun Java System Messaging Server versions 6.2 and 6.3. The issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, and it is noted as a different vulnerability from CVE-2007-2904. The connected sources provide the affe...

Solaris 10 (x86) : 138877-01

SunOS 5.10x86: usr/lib/inet/in.dhcpd patc. Date this patch was last updated by Sun : Nov/06/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated check has been entirely replaced by solaris10x86148310.nasl. Disabled on 2015/05/22. C Tenable Network Security, Inc. T...

Solaris 10 (sparc) : 138387-01

SunOS 5.10: libc.so.1.9 patch. Date this patch was last updated by Sun : Nov/07/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 138253-02

SunOS 5.10: /sbin/sh patch. Date this patch was last updated by Sun : Dec/02/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Sun Java System Identity Manager Version Detection (deprecated)

Binary data 4755.prm...

Sun Solaris DHCP请求处理拒绝服务及代码执行漏洞

BUGTRAQ ID: 32213 CVECAN ID: CVE-2007-5365 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的DHCP服务器（in.dhcpd1M）处理DHCP请求中的安全漏洞可能允许远程非特权用户杀死DHCP服务进程（拒绝服务）或以root用户权限执行任意指令。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 10.0x86 Sun Solaris 10.0 Sun OpenSolaris snv01 -...

Sun Solstice X.25本地拒绝服务漏洞

CNCAN ID：CNCAN-2008111104 Sun Solstice是一款企业级网络管理方案。 Sun Solstice X.25存在拒绝服务问题，本地攻击者可以利用漏洞使系统崩溃。 对"/dev/xty"有读权限的本地非特权用户利用Solstice X.2存在的缺陷可导致多CPU上的系统触发panic，造成拒绝服务攻击。 Solstice X.25 9.x 可参考如下补丁： X.25 9.2 for Solaris 8, 9 and 10 on SPARC:...

Sun Solaris DHCP请求处理漏洞

CVE ID：CVE-2007-5365 Sun Solaris是一款商业性质的操作系统。 Sun Solaris处理DHCP请求存在问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 -处理DHCP请求时in.dhcpd存在边界错误，可导致缓冲区溢出。 -处理DHCP请求时in.dhcpd存在一个未明错误，可导致DHCP服务器守护程序崩溃或以root权限执行任意代码。 Sun Solaris 10 Sun Solaris 8 Sun Solaris 9 可参考如下补丁： -- SPARC Platform -- Solaris 8:...

Sun Java System Identity Manager 6.07.x - Multiple Vulnerabilities

Sun Java System Identity Manager 6.07.x - Multiple Vulnerabilities...

Sun Java System Identity Manager 6.0/7.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/32262/info Sun Java System Identity Manager is prone to multiple web-interface vulnerabilities, including a cross-site request-forgery issue, multiple cross-site scripting issues, multiple HTML-injection issues, and a directory-traversal vulnerability...

CVE-2008-5010

in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv103, allows remote attackers to cause a denial of service assertion failure and daemon exit via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805...

CVE-2008-5009

Race condition in the sxout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service panic via vectors involving reading the /dev/xty file...

Race condition

Race condition in the sxout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service panic via vectors involving reading the /dev/xty file...

CVE-2008-5009

Race condition in the sxout kernel module in Sun Solstice X.25 9.2, when running on a multiple CPU machine, allows local users to cause a denial of service panic via vectors involving reading the /dev/xty file...