CVE-2008-1115

CVE-2008-1115 concerns Sun Solaris 8 where a vulnerability in directory-related functions allows a local user to trigger a denial of service (panic) through an unspecified sequence of system calls or commands. Some connected sources label the issue as command injection; others echo the unspecifie...

CVE-2008-1095

Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...

Design/Logic Flaw

Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...

CVE-2008-1095

Unspecified vulnerability in the Internet Protocol IP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service panic via unknown vectors, possibly related to ICMP packets and IP fragment reassembly...

CVE-2008-1095

CVE-2008-1095 affects the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10. The vulnerability is described as an unspecified issue that allows remote attackers to bypass firewall policies or cause a denial of service (panic) via unknown vectors, with possible involvement of ICMP ...

Sun Solaris DTrace动态追踪框架信息泄露漏洞

BUGTRAQ ID: 27942 Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 DTrace（请见dtrace1M）动态追踪框架中的安全漏洞可能允许给予了PRIVDTRACEUSER或PRIVDTRACEPROC权限（请见privileges5）的本地用户或非全局区执行一些内核级追踪，然后这些用户就可以访问敏感信息。 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法：...

Design/Logic Flaw

Unspecified vulnerability in the dynamic tracing framework DTrace in Sun Solaris 10 allows local users with PRIVDTRACEUSER or PRIVDTRACEPROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126...

Race condition

Multiple race conditions in the CPU Performance Counters cpc subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service panic via unspecified vectors related to kcpcunbind and kcpcrestore...

CVE-2008-0933

Multiple race conditions in the CPU Performance Counters cpc subsystem in the kernel in Sun Solaris 10 allow local users to cause a denial of service panic via unspecified vectors related to kcpcunbind and kcpcrestore...

CVE-2008-0933

CVE-2008-0933 corresponds to multiple race conditions in the Solaris 10 kernel’s CPU Performance Counters (cpc) subsystem. The vulnerability affects the kernel component related to kcpc_unbind and kcpc_restore, enabling local users to trigger a denial of service (panic) via unspecified vectors. T...

CVE-2008-0938

Unspecified vulnerability in the dynamic tracing framework DTrace in Sun Solaris 10 allows local users with PRIVDTRACEUSER or PRIVDTRACEPROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126...

CVE-2008-0938

Technical details for CVE-2008-0938 are not publicly available in the provided connected documents. The entries reference Solaris DTrace and privilege-based access, but no concrete affected versions, root cause, or remediation are included here. Monitor for updates.

CVE-2008-0836

Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 9 and 10 on x86 architectures allows local users to cause a denial of service panic via unspecified vectors that trigger a NULL pointer dereference in the vuid3ps2 module, a different issue than CVE-2007-5319...

CVE-2008-0836

CVE-2008-0836 describes an unspecified vulnerability in the vuidmice STREAMS modules on Sun Solaris 8–10 (x86) that allows local users to cause a denial of service (panic) via vectors triggering a NULL pointer dereference in the vuid3ps2 module. The issue is categorized as a local access problem ...

Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)

Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue...

Buffer overflow security vulnerabilities in Java Web Start (CVE-2008-1189, CVE-2008-1190)

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.216 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth" issue...

Applets or Applications are allowed to display an oversized window

Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.215 and earlier, and SDK and JRE 1.3.120 and earlier allows remote attackers to circumvent display of the untrusted-code warning banner...

java: Vulnerability in the font parsing code

Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.214 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself...

SOL8424 - Java Runtime Environment Vulnerability - CVE-2008-0657

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges through an untrusted application or applet, as demonstrated by an application or applet that grants...

CVE-2008-0730

The 1 Simplified Chinese, 2 Traditional Chinese, 3 Korean, and 4 Thai language input methods in Sun Solaris 10 create files and directories with weak permissions under a .iiim/le and b .Xlocale in home directories, which might allow local users to write to, or read from, the home directories of...