CORE-2008-0716 - Sun xVM VirtualBox Privilege Escalation Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://www.coresecurity.com/corelabs/ Sun xVM VirtualBox Privilege Escalation Vulnerability Advisory Information Title: Sun xVM VirtualBox Privilege Escalation Vulnerability Advisory ID: CORE-2008-0716...

Sun Netra T5220 Server本地拒绝服务漏洞

BUGTRAQ ID: 30557 CNCAN ID：CNCAN-2008080702 Sun Netra T5220 Server是一款64线程机架服务器。 Sun Netra T5220系统的固件存在一个安全错误，本地攻击者可以利用漏洞使系统崩溃，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Netra T5220 Server 可参考如下安全公告获得补丁信息： http://sunsolve.sun.com/search/document.do?assetkey=1-66-239930-1...

[SE-2008-01] J2ME Security Vulnerabilities 2008

Dear Bugtraq, The following information might be of interest for the readers of this list. Security Explorations http://www.security-explorations.com, a new security research start-up company from Poland discovered two very serious security vulnerabilities in mobile Java technology 1 coming from...

Sun Solaris 'snoop(1M)'工具远程命令执行漏洞

BUGTRAQ ID: 30556 CVE ID：CVE-2008-0964 CVE-2008-0965 CNCVE ID：CNCVE-20080964 CNCVE-20080965 Sun Solaris是一款商业性质的操作系统。 snoop1M网络工具相关的SMB通信显示存在安全问题，远程攻击者可以利用漏洞以'nobody'权限或其他本地用户权限执行任意命令。 目前没有详细漏洞细节提供。 如下平台受此漏洞影响： Solaris 10 Solaris 9 Solaris 8 OpenSolaris builds snv01 to snv95 Sun Solaris 9x86 Sun...

Sun xVM VirtualBox 'VBoxDrv.sys'本地特权提升漏洞

BUGTRAQ ID: 30481 CVE ID:CVE-2008-3431 CNCVE ID：CNCVE-20083431 Sun xVM VirtualBox是一款功能强大的虚拟机程序。 Sun xVM VirtualBox存在设计错误，本地攻击者可以利用漏洞提升特权。 当处理部分IOCTLs时VBoxDrv.sys驱动中存在错误，可导致在受影响宿主上以内核进程权限执行任意指令。...

Design/Logic Flaw

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \.\VBoxDrv device and...

CVE-2008-3431

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \.\VBoxDrv device and...

CVE-2008-3431

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \.\VBoxDrv device and...

CVE-2008-3431

The VBoxDrvNtDeviceControl function in VBoxDrv.sys in Sun xVM VirtualBox before 1.6.4 uses the METHODNEITHER communication method for IOCTLs and does not properly validate a buffer associated with the Irp object, which allows local users to gain privileges by opening the \.\VBoxDrv device and...

CVE-2008-3431

CVE-2008-3431 affects Sun xVM VirtualBox on Windows prior to 1.6.4. The VBoxDrv.sys driver handles IOCTLs with METHOD_NEITHER and fails to validate the user-supplied buffer, enabling a local unprivileged user to craft a kernel address and gain kernel privileges by calling DeviceIoControl to the ....

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces

Cross-site scripting XSS vulnerability in Sun Java Server Faces JSF 1.2 before 1.208 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces

Cross-site scripting XSS vulnerability in Sun Java Server Faces JSF 1.2 before 1.208 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces

Cross-site scripting XSS vulnerability in Sun Java Server Faces JSF 1.2 before 1.208 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces

Cross-site scripting XSS vulnerability in Sun Java Server Faces JSF 1.2 before 1.208 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

Sun xVM VirtualBox < 1.6.4 Local Privilege Escalation

The remote host contains a version of Sun xVM VirtualBox, an open source virtualization platform, before 1.6.4. Such versions reportedly include a kernel driver, 'VBoxDrv.sys', that allows a local user to open the device '.\VBoxDrv' and issue IOCTLs with a buffering method of 'METHODNEITHER'...

Code injection

Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service panic via unspecified vectors...

CVE-2008-3450

Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service panic via unspecified vectors...

CVE-2008-3450

CVE-2008-3450 covers an unspecified vulnerability in Sun Solaris 8–10 the namefs kernel module that could allow local privilege escalation or cause a denial of service (panic). The issue centers on the namefs driver; multiple patches exist by Sun/Oracle to mitigate it across affected releases: 11...

Sun Solaris 'namefs'内核本地特权提升漏洞

BUGTRAQ ID: 30513 CNCAN ID：CNCAN-2008080430 Sun Solaris是一款商业性质的操作系统。 Sun Solaris 'namefs'内核模块存在未明安全问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击，或特权提升。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10.0x86 Sun Solaris 10.0 可参考如下补丁： Sun Solaris 9x86 Sun 138570-01...

Sun Solaris平台信息和控制库picld(1M)本地拒绝服务漏洞

BUGTRAQ ID: 30450 CNCAN ID：CNCAN-2008080431 Sun Solaris是一款商业性质的操作系统。 Sun Solaris平台信息和控制库picld1M存在未明安全问题，本地攻击者可以利用漏洞关闭系统监视和预防系统工具 prtdiag1M, prtpicl1M, prtfru1M，导致拒绝服务攻击。 目前没有详细漏洞细节提供 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 8x86 Sun Solaris 8 Sun Solaris 10x86 Sun Solaris 10 Sun OpenSolaris bui...