CVE-2007-3880

CVE-2007-3880 is a format-string vulnerability in the srsexec binary of Sun Remote Services Net Connect (SUNWsrspx), affecting Solaris 8/9/10 via NetConnect 3.2.3/3.2.4. An attacker with local access to a set-UID root srsexec can trigger syslog handling of crafted input containing format specifie...

CVE-2007-3880

Format string vulnerability in srsexec in Sun Remote Services SRS Net Connect 3.2.3 and 3.2.4, as distributed in the SRS Proxy Core SUNWsrspx package, allows local users to gain privileges via format string specifiers in unspecified input that is logged through syslog...

Sun Solaris Volume Manager本地拒绝服务漏洞

Sun Solaris是一款商业性质的UNIX操作系统。 Sun Solaris卷管理SVM ioctl2接口存在安全问题，本地攻击者可以利用漏洞使系统不稳定，造成拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 9x86 Sun Solaris 9 Sun Solaris 10x86 Sun Solaris 10 补丁下载： Sun Solaris 9x86 Sun 122371-07 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -122371-07-1 Sun...

CVE-2007-5921

CVE-2007-5921 concerns an unspecified vulnerability in the ioctl interface of the Solaris Volume Manager (SVM) on Solaris 9 and 10 that allows local users to trigger a denial of service (panic). The core issue and affected components are not detailed in the initial description. Connected document...

iDefense Security Advisory 11.02.07: Sun Microsystems Solaris srsexec Format String Vulnerability

iDefense Security Advisory 11.02.07 http://labs.idefense.com/intelligence/vulnerabilities/ Nov 02, 2007 I. BACKGROUND The srsexec utility is part of the SRS Proxy Core package that is available with Solaris 10. This package is used to monitor the performance of clients running Solaris from a...

Sun Solaris SRS Proxy Core

srsexec syslog call format string vulnerability...

Sun Java Web Start dnsResolve ActiveX Buffer Overflow (CVE-2007-5019)

Microsoft SQL Server is a Relational Database Management System RDBMS that can be managed through Distributed Management Objects DMO. A remote attacker can exploit this issue to execute arbitrary code on vulnerable server...

CVE-2002-2425

Sun AnswerBook2 1.2 through 1.4.2 allows remote attackers to execute administrative scripts such as 1 AdminViewError and 2 AdminAddadmin via a direct request...

CVE-2002-2425

Sun AnswerBook2 1.2–1.4.2 is vulnerable to remote attackers executing administrative scripts (AdminViewError, AdminAddadmin) via a direct request. The vulnerability affects the specified versions and is documented under CVE-2002-2425 in multiple sources (NVD, Red Hat, CVE List). The available con...

Sun Solaris 10 Internet Protocol ip(7P)未明本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris 10 Internet协议ip7P存在未明问题，本地攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10.0 Sun Solaris 10x86 补丁下载： Sun Solaris 10x86 Sun 127112-02 http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -127112-02-1 Sun Solaris 10.0 Sun 127111-02...

Sun Fire X2100 M2和X2200 M2 ELOM远程任意命令执行漏洞

BUGTRAQ ID: 26250 Sun Fire是Sun推出的系列中端服务器。 Sun Fire的X2100 M2和X2200 M2服务器的嵌入式无人值守管理器（ELOM）软件中的安全漏洞可能允许远程非特权用户在嵌入式服务处理器（SP）上以root权限执行任意命令。 Sun Fire X2200 M2 Server Sun Fire X2100 M2 Server 临时解决方法： 管理员应仅通过串口连接或将Net Mgmt RJ-45以太网端口连接到专用管理网络来限制对SP的访问。 厂商补丁： Sun ---...

CVE-2002-2374

Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."...

CVE-2002-2374

Technical details about CVE-2002-2374 are not publicly provided in the supplied documents. Monitor for updates.

Sun Solaris SCTP Init处理远程拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris SCTP Init处理存在异常条件触发问题，远程攻击者可以利用漏洞对系统进行拒绝服务攻击。 目前没有详细漏洞细节提供。 Sun Solaris 10x86 Sun Solaris 10 补丁下载： http://sunsolve.sun.com/search/document.do?assetkey=1-26-103101-1&searchclause=...

Code injection

Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor SP via unspecified vectors, a different vulnerability than CVE-2007-5170...

Design/Logic Flaw

Unspecified vulnerability in the Stream Control Transmission Protocol sctp functionality in Sun Solaris 10, when at least one SCTP socket is in the LISTEN state, allows remote attackers to cause a denial of service panic via unspecified vectors related to "INIT processing."...

CVE-2007-5716

Unspecified vulnerability in the Internet Protocol IP functionality in Sun Solaris 10 allows local users to cause a denial of service panic via unspecified vectors, probably related to a UDP packet...

Code injection

Unspecified vulnerability in the Internet Protocol IP functionality in Sun Solaris 10 allows local users to cause a denial of service panic via unspecified vectors, probably related to a UDP packet...

CVE-2007-5717

Unspecified vulnerability in Sun Fire X2100 M2 and X2200 M2 Embedded Lights Out Manager ELOM on x86 before firmware 2.70 allows remote attackers to execute arbitrary commands as root on the Service Processor SP via unspecified vectors, a different vulnerability than CVE-2007-5170...

CVE-2007-5726

CVE-2007-5726 affects Sun Solaris 10 SCTP: when a LISTEN socket exists, remote denial of service (panic) can occur via INIT processing. Remediation is patch 127716-01 (SPARC) or 127717-01 (x86); see SunAlerts 1000936.1. No exploitation details are provided in the supplied documents.