CVE-2006-6495

CVE-2006-6495 describes a stack-based buffer overflow in ld.so.1 on Sun Solaris 8/9/10. An attacker can trigger arbitrary code execution via large precision padding values in a format string specifier passed to the doprf function, resulting in local code execution. The issue generally does not cr...

Sun Solaris ld.so多个本地安全漏洞

Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris的ld.so程序库实现上存在多个安全漏洞，本地攻击者可能利用这些漏洞提升自己的权限。 ld.so程序库对LANG环境变量值没有做充分的检查过滤即做为创建文件路径的一部分，本地攻击者可以在变量值中插入“../”目录遍历串，从而在系统上的任意位置创建文件。 ld.so程序库的doprf函数实现上存在一个栈溢出漏洞，本地攻击者可以利用此漏洞通过运行一个setuid程序来提升权限。 Sun Solaris 9.0 Sun Solaris 8.0 Sun Solaris 10.0 Sun Solaris 8.0 x8...

Sun Secure Global Desktop Software (SSGD) contains multiple cross-site scripting vulnerabilities

Overview The Sun Secure Global Desktop SSGD contains cross-site scripting vulnerabilities. Description Sun Secure Global Desktop formerly Tarantella contains multiple input validation vulnerabilities due to failure to properly sanitize user input. The following modules do not properly filter HTML...

ImageMagick Sun Bitmap图象文件远程缓冲区溢出漏洞

ImageMagick是一套可以用来读、写和处理超过89种基本格式的图片文件。 ImageMagick处理SUN Bitmap图象文件存在问题，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以进程权限执行任意指令。 攻击者可以构建恶意SUN Bitmap图象，诱使用户使用ImageMagick打开来触发，目前没有详细漏洞细节提供。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat Enterprise Linux WS 2.1 IA64 RedHat Enterprise Linux WS 2.1 RedHa...

Sun Solaris N1网格引擎多个本地漏洞

Sun N1 Grid Engine是一款SUN公司开发的网格引擎守护进程。 Sun N1 Grid Engine存在未明安全问题，本地攻击者可以利用漏洞未授权杀死qmaster或execd进程和关闭GRID服务，引起拒绝服务攻击。 Sun Grid Engine 5.3 x86 Sun Grid Engine 5.3 Sun Linux Sun Grid Engine 5.3 64-bit SPARC Sun Grid Engine 5.3 32-bit SPARC 补丁下载： SPARC平台 N1 Grid Engine 6.0 32-bit Solarispatch...

Apache Mod_Rewrite单字节缓冲区溢出漏洞

Apache是一款流行的开放源代码的HTTPD服务程序。 Apache modrewrite模块中LDAP机制处理存在单字节溢出错误，远程攻击者可以利用漏洞以WEB进程权限执行任意指令。 Apache modrewrite模块提供了一个基于规则的使用正则表达式分析器的实时转向URL请求的引擎。modrewrite模块在转义绝对URI机制时存在单字节错误，当分离LDAP URL的数据时escapeabsoluteuri 函数中会触发此漏洞。触发此漏洞可导致指向用户提供数据的指针写入字符指针数组边界之外，可用于控制程序，以WEB权限执行任意指令。...

Sun Java系统服务器嵌入式HTTP请求处理漏洞

Sun Java系统应用和WEB服务器都是与J2EE平台兼容的应用服务器。 Sun Java System Application Server在处理HTTP请求时存在漏洞，远程攻击者可能利用此漏洞执行各种攻击。 如果Sun Java System Application Server或Sun Java System Web Server使用Sun Java System Proxy Server的话，由于未能正确地实现HTTP/1.1...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting XSS, and poison web...

CVE-2006-6276

Sun Java System Proxy Server versions prior to 20061130 are affected by an HTTP request smuggling vulnerability when used with Sun Java System Application Server or Sun Java System Web Server. Exploitation could bypass HTTP request filtering, enable web session hijacking, permit cross-site script...

CVE-2006-6275

Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service panic via unspecified vectors, possibly related to the exitlwps function and SIGKILL and /proc PCAGENT signals...

CVE-2006-6275

CVE-2006-6275 documents a race condition in the Solaris kernel (versions 8–10) that allows local users to trigger a denial of service (panic) via unspecified attack vectors. The description hints at involvement of the exitlwps function and SIGKILL and /proc PCAGENT signals, but does not provide c...

Solaris 10 (i386) : 117550-12

The remote host is missing Sun Security Patch number 117550-12 Sun Studio 9x86: patch for Sun C++ 5.6x86 C++ Compiler. Date this patch was last updated by Sun : Wed Nov 26 05:16:44 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This scrip...

Solaris 10 (i386) : 124615-01

The remote host is missing Sun Security Patch number 124615-01 UnknownHostException. Date this patch was last updated by Sun : Sun Nov 12 15:41:17 MST 2006 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Solaris 10 (sparc) : 124614-01

The remote host is missing Sun Security Patch number 124614-01 UnknownHostException. Date this patch was last updated by Sun : Sun Nov 12 15:25:48 MST 2006 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the...

Solaris 10 (i386) : 117846-19

The remote host is missing Sun Security Patch number 117846-19 Sun Studio 10x86: Sun Compiler Common patch for x86 backend. Date this patch was last updated by Sun : Tue Feb 12 03:06:30 MST 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 70300 @DEPRECATED@ This...

Solaris 9 (sparc) : 122159-03

The remote host is missing Sun Security Patch number 122159-03 SNMP 1.4 support Netra-210. Date this patch was last updated by Sun : Fri Nov 03 18:29:02 MST 2006 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as th...

Solaris 8 (sparc) : 124696-01

The remote host is missing Sun Security Patch number 124696-01 Common Config Reader Sun Fire V210/V240/V250. You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended...

Solaris 7 (sparc) : 123919-12

Sun Management Center 3.6.1: Patch for Solaris 7. Date this patch was last updated by Sun : Dec/01/09 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; ...