CVE-2006-7140

The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which allows remote attackers to forge a PKCS 1 v1.5 signature that is signed by that RSA key and prevents libike from correct...

US-CERT Technical Cyber Security Alert TA07-059A -- Sun Solaris Telnet Worm

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA07-059A Sun Solaris Telnet Worm Original release date: February 28, 2007 Last revised: -- Source: US-CERT Systems Affected Sun Solaris 10 SunOS 5.10 Sun "Nevada" SunOS 5.11 Both SPARC and...

Sun Solaris unauthorized access

User's pasword is not checked in telnet session if F flag is set. On older versions defining TTYPROMPT variable allows unauthorized access with bin group privileges. Vulnerability is used by internet worm...

Heap overflow

Integer underflow in the SSLv2 support in Mozilla Network Security Services NSS before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x before 2.0.0.2, SeaMonkey before 1.0.8, Thunderbird before 1.5.0.10, and certain Sun Java System server products before 20070611, allows remote attackers to...

CVE-2007-0008

CVE-2007-0008 is an NSS heap-based overflow caused by an integer underflow when processing an SSLv2 server message with a key too short to encrypt the Master Secret. It affects SeaMonkey, Firefox, and Thunderbird around NSS usage and was addressed by updating to fixed NSS-containing packages (e.g...

CVE-2006-7028

Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service console hang via a flood of small TCP/IP packets. NOTE: this issue has not been replicated by third parties. In addition, the cause is unknown, although it might be related to...

CVE-2006-7028

CVE-2006-7028 pertains to single-CPU Sun systems running Solaris 7–9 (e.g., Netra) where a remote attacker can cause a denial-of-service (console hang) by flooding the device with small TCP/IP packets. The underlying cause is unknown; it may relate to the console receiving a large number of inter...

Re[2]: Solaris telnet vulnberability - how many on your network?

Dear Marc, This is hilarious, should there ever be a Top10 of the most weird bugs, this surely is one of them, repost for pure amusement : Solaris 2.6, 7, and 8 /bin/login has a vulnerability involving the environment variable TTYPROMPT. This vulnerability has already been reported to BugTraq and...

Solaris 10 (x86) : 125012-01

SunOS 5.10x86: sendmail patch. Date this patch was last updated by Sun : Jan/29/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 9 (x86) : 124521-05

N1 Grid Engine 6.0x86: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 124520-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 123372-02

SunOS 5.9: rm patch. Date this patch was last updated by Sun : Feb/06/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24404;...

Solaris 8 (sparc) : 120671-08

Mozilla 1.7 for Solaris 8 and 9. Date this patch was last updated by Sun : Aug/29/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

GLSA-200702-07 : Sun JDK/JRE: Execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200702-07 Sun JDK/JRE: Execution of arbitrary code A anonymous researcher discovered that an error in the handling of a GIF image with a zero width field block leads to a memory corruption flaw. Impact : An attacker could entice a...

Solaris 8 (x86) : 124521-05

N1 Grid Engine 6.0x86: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (sparc) : 124922-03

SunOS 5.10: ld.so.1 patch. Date this patch was last updated by Sun : Apr/09/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (x86) : 124831-01

X11 6.6.1x86: xdm patch. Date this patch was last updated by Sun : Jan/18/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (sparc) : 124520-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

SUSE-SA:2007:003: Sun Java

The remote host is missing the patch for the advisory SUSE-SA:2007:003 Sun Java. The SUN Java packages have been upgraded to fix security problems. SUN Java was upgraded on all affected distributions: - The Java 1.3 version to 1.3.119 for SUSE Linux Enterprise Server 8. - The Java 1.4 version als...

AMD64 x86 emulation Sun's J2SE Development Kit: Multiple vulnerabilities

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. The x86 emulation Sun's J2SE Development Kit for AMD64 contains a vulnerable version of Sun's JDK. Description Chris Evans has discovered multiple buffer overflows in Sun JDK and Su...