9002 matches found
Solaris 8 (sparc) : 121332-01
PC NetLink 2.0 Server Adm fixes. Date this patch was last updated by Sun : Dec/02/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Sun Solaris文件系统管理RBAC配置文件命令执行漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 与“文件系统管理”配置文件相关的RBAC配置中存在安全漏洞，可能允许被分配了该配置文件的本地用户以root用户权限执行任意命令。 Sun Solaris 9.0x86 Sun Solaris 9.0 Sun Solaris 8.0x86 Sun Solaris 8.0 临时解决方法： 如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 从execattr4数据库删除对format命令的引用。但是，这会导致用户无法获得对format命令的特权访问。 厂商补丁： Sun ---...
Sun Fire T2000错误DSA签名验证漏洞
Sun Fire是Sun推出的系列中端服务器。 Solaris 10 3/05 HW2的加密提供组件实现上存在漏洞，导致错误地验证DSA签名。 如果运行在Sun Fire T2000平台上的话，则Solaris 10 3/05 HW2中的加密程序可能错误的验证DSA签名。依赖于这个DSA签名验证结果的应用程序就可能信任已被篡改了的数据。 Sun Fire T2000 Server Sun已经为此发布了一个安全公告（Sun-Alert-102543）以及相应补丁: Sun-Alert-102543：Security Vulnerability on Sun Fire T2000 With...
Sun Solaris 10 - 'UFS' Local Denial of Service
source: https://www.securityfocus.com/bid/20919/info Sun Solaris 10 is prone to a local denial-of-service vulnerability. This issue affects the UFS filesystem-handling code. An attacker can exploit this issue to crash the affected computer, denying service to legitimate users. Solaris 10 on the...
Sun Solaris 10 - UFS Local Denial of Service
Sun Solaris 10 - UFS Local Denial of Service source: https://www.securityfocus.com/bid/20919/info Sun Solaris 10 is prone to a local denial-of-service vulnerability. This issue affects the UFS filesystem-handling code. An attacker can exploit this issue to crash the affected computer, denying...
CVE-2006-5653
Cross-site scripting XSS vulnerability in the errorHTML function in the index script in Sun Java System Messenger Express 6 allows remote attackers to inject arbitrary web script or HTML via the error parameter. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of t...
CVE-2006-5652
Cross-site scripting XSS vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related ...
CVE-2006-5654
Unspecified vulnerability in the Network Security Services NSS in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service application crash via unspecified vectors. NOTE: due to...
Sun SunView rpc.selection_svc远程文件泄露漏洞
selectionsvc是SunOS系统下一个RPC服务。 早期SunOS系统下的的selectionsvc RPC服务程序实现上存在漏洞，允许攻击者源程读取目标系统上的任意文件。 在Sun3和Sun4系统中，远程用户可以读取任何SunView运行用户可读的文件。而在i386平台下，远程用户可以读取运行SunView的工作站上的任意文件。注意，如果root运行了SunView，那么所有的文件就都可能被远程系统所访问。...
CVE-2006-5652
Cross-site scripting XSS vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets CSS function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related ...
[SA22676] Sun Solaris NVIDIA Graphics Driver Buffer Overflow Vulnerability
TITLE: Sun Solaris NVIDIA Graphics Driver Buffer Overflow Vulnerability SECUNIA ADVISORY ID: SA22676 VERIFY ADVISORY: http://secunia.com/advisories/22676/ CRITICAL: Highly critical IMPACT: Privilege escalation, DoS, System access WHERE: From remote OPERATING SYSTEM: Sun Solaris 10...
CVE-2006-5652
Technical details for CVE-2006-5652 are not publicly available in the provided documents. Monitor for updates.
CVE-2006-5654
CVE-2006-5654 concerns the NSS component used by Sun Java System Web Server 6.0 (pre-SP10) and ONE Application Server 7 (pre-Update 3) when SSLv2 is enabled, allowing remote authenticated users to cause a denial of service. Connected documents indicate related NSS issues (e.g., CVE-2006-5201) and...
Sun Solaris 10汇集网络设备本地不安全权限漏洞
Solaris是一款由Sun开发和维护的商业性质UNIX操作系统。 Solaris 10在默认安装软件时没有配置正确的访问权限，本地攻击者可能利用此漏洞非授权访问网络报文。 由于默认的Solaris 10配置没有执行正确和充分的权限检查，本地非特权用户可以在Solaris链路汇集中创建全新的套接字，导致非授权访问网络报文。 Sun Solaris 10x86 Sun Solaris 10.0 临时解决方法： 以超级用户权限运行以下参数的updatedrv1M命令： /usr/sbin/updatedrv -a -p 'readprivset=netrawaccess...
CVE-2006-5653
Sun Java System Messenger Express 6 is affected by a cross-site scripting (XSS) vulnerability in the errorHTML function of the index script, exploitable via the error parameter. The issue enables remote injection of script/HTML and is cataloged as CVE-2006-5653 with a MEDIUM impact (PARTIAL integ...
CVE-2006-5654
Unspecified vulnerability in the Network Security Services NSS in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service application crash via unspecified vectors. NOTE: due to...
DSA-1203-1 libpam-ldap
Bulletin has no description...
Cross Site Scripting (XSS) Vulnerability in iPlanet Messaging Server Messenger Express by "Sun"
·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in iPlanet Messaging Server Messenger Express by "Sun" Discovered Date: 25/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.sun.com/ Details: iPlanet Messaging Server Messenger Expres...
SystemMessenger_xss.txt
------=Part15425083137.1162268411579 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Sun java System Messenger Express remote XSS vulnerabilities By: Handrix 29 November 2006 MorX security research team www.morx.org...