Sun Solaris NFS RPC本地拒绝服务漏洞

BUGTRAQ ID:30853 CNCAN ID：CNCAN-2008082707 Sun Solaris是一款商业性质的操作系统。 Sun Solaris NFS远程过程调用域实现存在安全问题，本地拥有管理员权限的攻击者可以利用漏洞在非全局域中截获或破坏到其他非全局域的通信。 可对受此漏洞影响的非全局域的NFS服务进行拒绝服务攻击。目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10sparc Sun Solaris 10.0x86 Sun Solaris 10 Sun OpenSolaris build snv87 Sun OpenSolar...

SuSE 10 Security Update : Java 1.4.2 (ZYPP Patch Number 5431)

Sun Java was updated to 1.4.2u18 to fix following security vulnerabilities : - Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive informatio...

openSUSE 10 Security Update : java-1_4_2-sun (java-1_4_2-sun-5430)

Sun Java was updated to 1.4.2u18 to fix following security vulnerabilities : CVE-2008-3114: Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensiti...

openSUSE 10 Security Update : java-1_5_0-sun (java-1_5_0-sun-5434)

Sun Java was updated to 1.5.0u16 to fix following security vulnerabilities : CVE-2008-3115: Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attacker...

openSUSE 10 Security Update : java-1_6_0-sun (java-1_6_0-sun-5435)

This update brings the SUN JDK 6 to update level 7. CVE-2008-3115: Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit...

Sun Solaris Platform Information and Control Library picld(1M) Local Denial of S

The Sun Solaris Platform Information and Control Library daemon 'picld1M' is prone to a local denial-of-service vulnerability. A local unprivileged attacker can exploit this issue to disable system monitoring and prevent proper operations of certain system utilities, resulting in a...

Sun Solaris 'namefs' Kernel Local Privilege Escalation Vulnerability

Sun Solaris也容易给当地的特权升级的漏洞。 本地攻击者可以利用这个问题上执行任意代码与内核级的特权。成功利用这个问题将导致被完全控制。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10.0x86 Sun Solaris 10.0 Avaya Interactive Response 3.0 Avaya Interactive Response 2.0 Avaya CMS Server 13.0 Avaya CMS Server 14.1 Avaya CMS Server 14...

Sun Solaris Netscape Portable Runtime API Local Privilege Escalation Vulnerabili

CVE-2006-4842 The Netscape Portable Runtime API running on Sun Solaris 10 operating system is prone to a local privilege-escalation vulnerability. A successful exploit of this issue allows an attacker to gain superuser privileges, completely compromising the affected computer. Version 4.6.1 runni...

Sun Java System Portal Server Portlets跨站脚本漏洞

BUGTRAQ ID: 30738 CNCAN ID：CNCAN-2008081909 Sun Java System Portal Server是一款与J2EE平台兼容的应用服务器。 Sun Java System Portal Server绑定的部分Portlets存在跨站脚本问题，远程攻击者可以利用漏洞在用户WEB浏览器上执行任意脚本代码。 目前没有详细漏洞细节提供。 Sun Java System Portal Server 7.1 Sun Java System Portal Server 7.0 Sun Java System Portal Server 7 可参考如下补丁：...

CVE-2003-1563

Sun Cluster 2.2 through 3.2 for Oracle Parallel Server / Real Application Clusters OPS/RAC allows local users to cause a denial of service cluster node panic or abort by launching a daemon listening on a TCP port that would otherwise be used by the Distributed Lock Manager DLM, possibly involving...

CVE-2003-1563

Technical details (affected products/components, specific versions, root cause, exploits, fixes) are not publicly provided in the connected documents. Monitor for updates.

Solaris 5.9 (sparc) : 124301-13

Portal Server 7.1 Update 2 Solaris sparc: Maintenance Update Rel. Date this patch was last updated by Sun : Apr/10/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 9 (x86) : 114262-05

SunOS 5.9x86: snoop Patch. Date this patch was last updated by Sun : Jan/06/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 5.9 (x86) : 124302-13

Portal Server 7.1 Update 2 Solarisx86:Maintenance Update Release. Date this patch was last updated by Sun : Apr/10/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.8 (sparc) : 124301-13

Portal Server 7.1 Update 2 Solaris sparc: Maintenance Update Rel. Date this patch was last updated by Sun : Apr/10/09 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 5.10 (x86) : 124302-13

Portal Server 7.1 Update 2 Solarisx86:Maintenance Update Release. Date this patch was last updated by Sun : Apr/10/09 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network...

Solaris 10 (x86) : 138061-04

SunOS 5.10x86: libldap patch. Date this patch was last updated by Sun : Sep/05/08 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 9 (sparc) : 112915-06

SunOS 5.9: snoop Patch. Date this patch was last updated by Sun : Jan/06/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2008-3683

Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service failure to accept connections via unknown vectors, probably related to exhaustion of file descriptors...

Design/Logic Flaw

Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a denial of service failure to accept connections via unknown vectors, probably related to exhaustion of file descriptors...