CVE-2002-2036

Sun Ray Server Software SRSS 1.3, when Non-Smartcard Mobility NSCM is enabled, allows remote attackers to login as another user by running dtlogin from a system that supports the XDMCP client...

CVE-2002-2072

java.security.AccessController in Sun Java Virtual Machine JVM in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service JVM crash via a Java program that calls the doPrivileged method with a null argument...

CVE-2002-2036

Sun Ray Server Software (SRSS) 1.3 with Non-Smartcard Mobility (NSCM) enabled is affected. The issue allows remote attackers to log in as another user by running dtlogin on a system with XDMCP client support, indicating a network-exposed authentication bypass via XDMCP/X11 components. The core de...

Slackware 10.0 / 10.1 / 8.1 / 9.0 / 9.1 / current : java (jre, j2sdk) (SSA:2005-170-01)

Sun has released a couple of security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. These could allow applets to read or write to local files. For more details, Sun's advisories may be found here:...

FreeBSD : jdk -- jar directory traversal vulnerability (18e5428f-ae7c-11d9-837d-000e0c2e438a)

Pluf has discovered a vulnerability in Sun Java JDK/SDK, which potentially can be exploited by malicious people to compromise a user's system. The jar tool does not check properly if the files to be extracted have the string '../' on its names, so it's possible for an attacker to create a malicio...

[SA16060] Sun Solaris / SEAM Kerberos KDC Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Solaris Socket Hijack

/ $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

Solaris (SPARC/x86) - Local Socket Hijack

/ $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

Solaris SPARC / x86 Local Socket Hijack Exploit

Exploit for solaris platform in category local exploits =============================================== Solaris SPARC / x86 Local Socket Hijack Exploit =============================================== / $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug...

Solaris 9 (sparc) : 119449-02

SunOS 5.9: Perl Patch. Date this patch was last updated by Sun : Mar/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1860...

Solaris 9 (x86) : 119450-02

SunOS 5.9x86: Perl Patch. Date this patch was last updated by Sun : Mar/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-2005-2071

traceroute in Sun Solaris 10 on x86 systems allows local users to execute arbitrary code with PRIVNETRAWACCESS privileges via 1 a large number of -g arguments or 2 a malformed -s argument with a trailing . dot...

CVE-2005-2071

CVE-2005-2071 affects Sun Solaris 10 on x86 where traceroute can allow a local user to run arbitrary code with PRIV_NET_RAWACCESS by supplying a large number of -g arguments or a malformed -s argument with a trailing dot. Connected advisories document patches: Solaris 10 (x86) 121013-03 and Solar...

CVE-2002-1871

CVE-2002-1871 concerns Sun Solaris: the pkgadd utility in Solaris 2.5.1–8 can install files with setuid/setgid root when the pkgmap entry’s mode/owner/group contain a “?” in certain fields, enabling privilege escalation. Red Hat and CVE aggregations corroborate the same description. Core details:...

CVE-2002-1980

The CVE-2002-1980 entry concerns a buffer overflow in Sun Solaris volumes-d vold (Volume Manager daemon) affecting Solaris 2.5.1 through 8. The underlying flaw is a buffer overflow in vold that allows local users to execute arbitrary code. Affected component: vold; affected platforms: Solaris 2.5...

CVE-2002-1980

Buffer overflow in Volume Manager daemon vold of Sun Solaris 2.5.1 through 8 allows local users to execute arbitrary code via unknown attack vectors...

CVE-2002-1871

pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" question mark in the 1 mode, 2 owner, or 3 group fields, which allows attackers to elevate privileges...

[SA13638] Sun Solaris Perl Modules Two Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

Multiple Sun Solaris perl modules problems

Safe.pm protection bypass, CGI.pm crossite scripting...

Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities

Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/14049/info Sun Solaris traceroute is affected by multiple local buffer overflow vulnerabilities. These vulnerabilities present themselves when the application handles excessive dat...