sadmind AUTH_SYS authentication vulnerability

Added: 01/09/2006 CVE: CVE-2003-0722 BID: 8615 OSVDB: 4585 Background sadmind is a service which coordinates distributed system administration operations remotely. The Sun Solstice AdminSuite runs sadmind with the AUTHSYS authentication method by default. Problem The sadmind running with the...

CVE-2005-4706

Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service panic via unknown vectors that trigger a null dereference in the secpolicyfscommon function...

CVE-2005-4804

Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications...

CVE-2005-3659

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup SBU 6.0 and 6.1 and StorEdge Enterprise Backup Software EBS 7.1 through 7.2L, allows remote attackers to cause a denial of service nsrd service crash via a malforme...

CVE-2005-4701

Unspecified vulnerability in Process File System procfs in Sun Solaris 10 allows local users to obtain sensitive information such as process working directories via unknown attack vectors, possibly pwdx...

CVE-2005-4806

Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service unresponsive service via unknown vectors...

CVE-2005-4552

The 1 slsmgr and 2 slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges...

CVE-2005-4552

The 1 slsmgr and 2 slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges...

CVE-2005-4552

The CVE-2005-4552 entry applies to Sun Solaris PC NetLink 2.0, affecting the (1) slsmgr and (2) slsadmin programs. The root issue is insecure handling of temporary files, which allows local users to gain privileges. The description does not specify version ranges beyond PC NetLink 2.0, nor provid...

[SA18230] Sun Solaris PC NetLink Insecure File Handling Vulnerability

TITLE: Sun Solaris PC NetLink Insecure File Handling Vulnerability SECUNIA ADVISORY ID: SA18230 VERIFY ADVISORY: http://secunia.com/advisories/18230/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system SOFTWARE: Sun Solaris PC Netlink 2.x http://secunia.com/product/6667/...

Sun Solaris PC Netlink symbolic links problem

"/opt/lanman/sbin/slsmgr" and "/etc/init.d/slsadmin" symbolic links problem...

Sun Java JRE sandbox protection bypass

Few vulnerabilities allow applets to write local files and execute applications...

Solaris 10 (x86) : 118372-10

SunOS 5.10x86: elfsign patch. Date this patch was last updated by Sun : Apr/16/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

DSA-921-1 kernel-source-2.4.27 - several

Bulletin has no description...

CVE-2005-4133

Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via 1 an unspecified vector and 2 proxy log files...

CVE-2005-4133

Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via 1 an unspecified vector and 2 proxy log files...

CVE-2005-4133

Sun Update Connection in Solaris 10, when configured to use a web proxy, may allow local users to obtain the proxy authentication password through an unspecified vector and proxy log files. The available sources describe the affected component and the impact (exposure of proxy credentials to loca...

CVE-2005-4045

Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator TLA default password via unknown vectors, possibly involving configuretopleveladmin.ldif...

CVE-2005-4046

Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct...

CVE-2005-4045

Technical details about CVE-2005-4045 are not provided in the supplied documents. The NVD entry mentions an unspecified vulnerability in Sun Java System Messaging Server 2005Q1 enabling TLA password exposure, but vectors, affected versions, and fixes are not disclosed here.