Sun JDK/JRE: Execution of arbitrary code

Background The Sun Java Development Kit JDK and the Sun Java Runtime Environment JRE provide the Sun Java platform. Description A anonymous researcher discovered that an error in the handling of a GIF image with a zero width field block leads to a memory corruption flaw. Impact An attacker could...

Sun Solaris TCP packets processing race conditions

DoS against system is possible...

Solaris 10 (sparc) : 120068-03

SunOS 5.10: in.telnetd patch. Date this patch was last updated by Sun : Feb/21/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Sun Solaris Telnet Service Unauthorized Remote Login (CVE-2007-0882)

A vulnerability has been reported in Sun Solaris telnet daemon. The vulnerability is due to an error in the Sun Solaris telnet daemon in.telnetd that fails to properly validate authentication information prior to passing it to the 'login' process. An attacker can exploit this flaw to bypass...

Immunity Canvas: SOLARIS_TELNET

Name| solaristelnet ---|--- CVE| CVE-2007-0882 Exploit Pack| CANVAS Description| solaristelnet Notes| References: 'http://sunsolve.sun.com/search/document.do?assetkey=1-26-102802-1', 'http://blogs.sun.com/tpenta/entry/theintelnetdvulnerabilityexploit', 'http://blogs.zdnet.com/security/?p=31',...

Sun Solaris Telnet Remote Authentication Bypass Vulnerability

Description Sun Solaris 10 is prone to a vulnerability that allows remote attackers to bypass authentication. Successfully exploiting this issue allows remote attackers to gain remote access to vulnerable computers. If the targeted computer is configured to allow non-console logins for superusers...

Sun Solaris telnet authentication bypass vulnerability

Overview A vulnerability in the Sun Solaris telnet daemon in.telnetd could allow a remote attacker to log on to the system with elevated privileges. Description The Sun Solaris telnet daemon may accept authentication information via the USER environment variable. However, the daemon does not...

security flaw

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 5 and earlier, Java System Development Kit SDK and JRE 1.4.210 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

security flaw

Unspecified vulnerability in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 6 and earlier, Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, and SDK and JRE 1.3.118 and earlier allows attackers to use untrusted applets to "access data in other...

Opera security advisory 2004-12-10 – Opera Security Advisories

Opera security advisory 2004-12-10 – Opera Security Advisories OPCOM Team | February 9, 2007 Opera security advisory Named frames or windows can be hi-jacked by malicious frames or windows. Periods in the file name and non-breaking spaces in the Content-Type header can make the save/open dialog...

Axigen <= 2.0.0b1 Remote Denial of Service Exploit (2)

No description provided by source. / doaxigen-v2.c axigen 1.2.6 - 2.0.0b1 DoS x86-lnx by mu-b - Sun Oct 29 2006 - Tested on: AXIGEN 1.2.6 lnx AXIGEN 2.0.0b1 lnx parsing error results in login without username & password! which in turn causes a NULL pointer dereference.. / /...

Sun Network Security Services (NSS) vulnerable to DoS due to an unspecified vulnerability

Overview The NSS libraries used in the Sun One Application Server and the Sun Java System web server contain an unspecified vulnerability that may allow an attacker to create a denial-of-service condition. Description The Sun One Application Server provides a Java 2 Platform for delivering Java...

Samba NSS主机查询Winbind多个远程缓冲区溢出漏洞

Samba是一套实现SMB（Server Messages Block）协议、跨平台进行文件共享和打印共享服务的程序。 Sun Solaris的nsswinbind.so.1库实现上存在漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果Sun Solaris系统运行Samba的winbindd守护程序且配置为使用nsswinbind.so.1库进行gethostbyname和getipnodebyname名称解析查询的话，如： /etc/nsswitch.conf ... ipnodes: files winbind hosts: files winbind...

Sun Solaris Loopback文件系统本地拒绝服务漏洞

Sun Solaris是一款商业性质的操作系统。 Sun Solaris Loopback文件系统存在安全问题，本地攻击者可以利用漏洞删除或者重命名文件。 在非全局域中的本地特权用户可以删除或重命名只读挂接的loopback文件系统中的文件。此文件系统与全局域共享，可导致全局域中的文件删除。 Sun Solaris 10.0 x86 Sun Solaris 10 补丁下载： Sun Solaris 10.0 x86 Sun 118855-28 http://sunsolve.sun.com/pub-cgi/pdownload.pl?target=118855-28&method=h...

Sun Solaris环回文件系统本地拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Sun Solaris环回文件系统的实现上存在漏洞，本地攻击者可能利用此漏洞非授权删除文件。 非全局区中的本地特权用户可能删除或重命名以只读方式加载的环回文件系统（请见lofs7FS）中的文件。这个文件系统可能与全局区共享，导致从全局区中也可以删除文件。删除文件可能导致非全局区和全局区中拒绝服务（DoS）。 Sun Solaris 10x86 Sun Solaris 10.0 Sun已经为此发布了一个安全公告（Sun-Alert-102699）以及相应补丁: Sun-Alert-102699：A Security...

Sun Solaris Loopback Filesystem protection bypass

Users can rename and delete files in read-only file system...

CVE-2007-0668

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...

Denial of service

The Loopback Filesystem LOFS in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of service...

CVE-2007-0668

The CVE-2007-0668 entry covers Sun Solaris 10’s Loopback Filesystem (LOFS). Affected: LOFS in a non-global zone. Issue: local users can move and rename files within a read-only filesystem, which can cause a denial of service. Root cause: insufficient protection of file operations in LOFS enabling...

Sun Solaris畸形ICMP报文远程拒绝服务漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10 ICMP报文处理过程实现上存在安全漏洞，远程非特权用户可能利用此漏洞导致拒绝服务（DoS）。 如果触发了上述漏洞，系统可能变得忙碌，栈追踪类似于： ip:illrefrele+0x80x0, 0x0, 0x0, 0x1010 ip:ipoutput+0x149c0x0?, 0x6000864f2c0?, 0x60001bcede0?, , 0x2 ip:ipwput0x60001bcede0, 0x600053ac140 - frame recycled...