9002 matches found
Preemptive Protection against Sun Solaris rpc.ypupdated Command Injection Vulnerability
A command injection vulnerability exists in Sun Solaris Network Information Service NIS. Sun Solaris provides its NIS services through the SUN-RPC remote procedure call RPC mechanism. A remote attacker may exploit this issue to inject and execute arbitrary code on a vulnerable system via a...
Sun Java System ASP < 4.0.3 Multiple Vulnerabilities
The remote host is running Sun Java System Active Server Pages ASP, or an older variant such as Sun ONE ASP or Chili!Soft ASP. The web server component of the installed version of Active Server Pages on the remote host is affected by several vulnerabilities : - A flaw in an include file used by...
Sun Java System ASP Server < 4.0.3 Multiple Vulnerabilities
The remote host is running Sun Java System Active Server Pages ASP, or an older variant such as Sun ONE ASP or Chili!Soft ASP. The web server component of the installed version of Active Server Pages on the remote host is affected by several vulnerabilities : - Several of the administration...
Sun Solaris NIS+未明远程拒绝服务漏洞
BUGTRAQ ID: 13552 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Sun Solaris的rpc.nisd NIS+守护程序存在未明的远程拒绝服务漏洞，远程非特权用户可以导致受影响的守护进程崩溃，或导致进程陷入死循环，消耗CPU资源。 反复攻击可以禁用网络中的所有NIS+服务程序，导致目录服务持续的拒绝服务。最可能的结果是所有相关的服务和认证进程全部失效。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 Sun Solaris 7.0x86 Sun Solar...
Sun Solaris snmpXdmid(1M)远程拒绝服务漏洞
BUGTRAQ ID: 29965 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 运行在Solaris上的Sun Solstice企业SNMP-DMI映射器子代理守护程序（snmpXdmid1M）中的安全漏洞可能允许本地或远程非特权用户通过发送畸形报文杀死守护程序进程。如果出现了上述漏洞，snmpXdmid会core dump，core文件的pstack输出类似于： core 'core' of 362: /usr/lib/dmi/snmpXdmid -s hostname ----------------- lwp 2 / thread 2...
Sun Java System Access Manager XSLT样式表单XML签名远程代码执行漏洞
BUGTRAQ ID: 29988 CNCAN ID：CNCAN-2008063001 Sun Java System Access Manager是一款安全单点登录、认证、授权解决方案。 Sun Java系统访问管理器没有正确安全处理XML签名中的XSLT样式表单，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 能建立使用访问管理器本地可查看的XML签名的远程用户可以访问管理器应用程序权限执行任意代码。访问管理器由WEB'容器'应用程序运行，如Sun Java System Application...
Code injection
The SNMP-DMI mapper subagent daemon aka snmpXdmid in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service daemon crash via malformed packets...
CVE-2008-2945
Technical details for CVE-2008-2945 are not provided in the connected documents; public disclosures and remediation are not covered here. Monitor for updates.
CVE-2008-2946
CVE-2008-2946 affects Sun Solaris 8–10, specifically the SNMP-DMI mapper subagent daemon (snmpXdmid) in Solstice Enterprise Agents. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending malformed SNMP packets. Public references and Nessus plugins confirm...
CVE-2008-2946
The SNMP-DMI mapper subagent daemon aka snmpXdmid in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service daemon crash via malformed packets...
java-jre: GIF buffer overflow
Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...
BMP image parser vulnerability
The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.120 and earlier...
XnView 1.93.6 for Windows .taac Local Buffer Overflow Exploit PoC
No description provided by source. include stdio.h include stdlib.h / XnView 1.93.6 for Windows .taac buffer overflow proof of concept. The vulnerability is caused due to a boundary error when processing the "format" keyword of Sun TAAC files. This can be exploited to...
Stack overflow
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...
CVE-2008-2427
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...
CVE-2008-2427
The CVE-2008-2427 issue affects XnView, NConvert, and GFL SDK: a stack-based buffer overflow when parsing the Sun TAAC file’s format keyword, impacting XnView 1.93.6 (Windows) and 1.70 (Linux/FreeBSD), NConvert 4.92, and GFL SDK 2.82. The root cause is a boundary/error in processing the format ke...
CVE-2008-2427
Stack-based buffer overflow in NConvert 4.92, GFL SDK 2.82, and XnView 1.93.6 on Windows and 1.70 on Linux and FreeBSD allows user-assisted remote attackers to execute arbitrary code via a crafted format keyword in a Sun TAAC file...
