CVE-2006-4958

Sun Secure Global Desktop (SSGD, Tarantella) contains multiple cross-site scripting vulnerabilities up to build 4.20.983. CERT details enumerate affected modules: taarchives.cgi, ttaAuthentication.jsp, ttalicense.cgi, ttawlogin.cgi, ttawebtop.cgi, ttaabout.cgi, and test-cgi, with the issue allowi...

Solaris 10 (sparc) : 120543-36 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Apache HTTP Server. The supported version that is affected is 10. Easily exploitable vulnerability allows successful unauthenticated network attacks via HTTP. Successful attack of this vulnerability can result in...

CVE-2006-4773

Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service controller reboot via a flood of traffic on the LAN...

CVE-2006-4773

Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service controller reboot via a flood of traffic on the LAN...

CVE-2006-4773

CVE-2006-4773 affects Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier. The vulnerability allows a remote attacker to cause a denial of service by flooding the LAN, triggering a controller reboot. The available documents provide this impact but do not include exploit code...

CVE-2006-4655

Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local users to gain privileges via a long XKBCHARSET environment variable value...

CVE-2006-4655

CVE-2006-4655 affects the X Window System X11R6.4 and earlier: a buffer overflow in the XKEYBOARD extension Strcmp() enables local privilege escalation via a long _XKB_CHARSET environment variable. Affected platforms include SCO UnixWare 7.1.3 and Sun Solaris 8–10. Public exploitation exists (e.g...

[RISE-2006001] X11R6 XKEYBOARD extension Strcmp() buffer overflow

RISE-2006001 X11R6 XKEYBOARD extension Strcmp buffer overflow vulnerability Released: September 07, 2006 Last updated: September 07, 2006 INTRODUCTION There exists a vulnerability within a string manipulation function of the X11R6 X11R6.4 and lower X Window System library, which when properly...

X11R6 < 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow

/ X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms...

X11R6 6.4 XKEYBOARD (solaris x86) - Local Buffer Overflow

X11R6 6.4 XKEYBOARD solaris x86 - Local Buffer Overflow / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 x86 Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software;...

X11R6 6.4 XKEYBOARD (SolarisSPARC) - Local Buffer Overflow (1)

X11R6 6.4 XKEYBOARD SolarisSPARC - Local Buffer Overflow 1 / X11R6 XKEYBOARD extension Strcmp for Sun Solaris 8 9 10 SPARC Copyright 2006 RISE Security , Ramon de Carvalho Valle This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public Licen...

USN-340-1: imagemagick vulnerabilities

Tavis Ormandy discovered several buffer overflows in imagemagick's Sun Raster and XCF Gimp image decoders. By tricking a user or automated system into processing a specially crafted image, this could be exploited to execute arbitrary code with the users' privileges...

CVE-2006-4439

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

CVE-2006-4439

CVE-2006-4439 refers to a Solaris 10 local-privilege issue in pkgadd where, prior to 2006-08-25, files could be installed with insecure permissions (755 or 777) if the pkgmap mode field contained a question mark. This could allow local users to modify arbitrary files or directories. The descripti...

CVE-2006-4439

pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions 755 or 777 if the pkgmap file contains a "?" question mark in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871...

[SA21633] Sun Solaris pkgadd Insecure File Permissions

TITLE: Sun Solaris pkgadd Insecure File Permissions SECUNIA ADVISORY ID: SA21633 VERIFY ADVISORY: http://secunia.com/advisories/21633/ CRITICAL: Less critical IMPACT: Manipulation of data, Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 10 http://secunia.com/product/4813/...

Sun Solaris pkgadd weak permissions

755 or 777 access mode is set if "mode" field of package contains any ?...

CVE-2006-4353

Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attackers to read data from arbitrary files via unspecified vectors...

CVE-2006-4353

Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attackers to read data from arbitrary files via unspecified vectors...

CVE-2006-4353

The CVE concerns Sun Java System Content Delivery Server versions 4.0, 4.1 and 5.0. Affected component: Content Delivery Server; vulnerability type described as an unspecified flaw that allows local and remote attackers to read data from arbitrary files via unspecified vectors. The exact root cau...