9002 matches found
Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities
Sun Solaris 10 Traceroute - Multiple Local Buffer Overflow Vulnerabilities source: https://www.securityfocus.com/bid/14049/info Sun Solaris traceroute is affected by multiple local buffer overflow vulnerabilities. These vulnerabilities present themselves when the application handles excessive dat...
CVE-2005-2032
Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files...
CVE-2001-1479
Sun Management Center (SMC) 2.0 on Solaris 8 is affected. A local user can delete arbitrary files by exploiting a symlink on /tmp/smc$SMC_PORT, as described in CVE-2001-1479. The issue enables LOCAL access with low complexity and partial integrity impact; no remediation details are provided in th...
CVE-2005-2022
Technical details about CVE-2005-2022 are not publicly available in the provided documents; no confirmed affected versions, root cause, impact, or remediation are disclosed beyond the brief description. Monitor for updates.
CVE-2005-2032
CVE-2005-2032 concerns an unknown vulnerability in lpadmin on Sun Solaris 7/8/9 that allows local users to overwrite arbitrary files. Connected sources document affected products as Solaris with lp patches to remediate (e.g., 107115-20 for Solaris 7 SPARC, 107116-20 for Solaris 7 x86, 109320-22 a...
CVE-2001-1479
smcboot in Sun SMC Sun Management Center 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMCPORT...
CVE-2001-1503
Vulnerability: The finger daemon (in.fingerd) in Sun Solaris 2.5–8 and SunOS 5.5–5.8 allows remote attackers to list all user accounts by sending a crafted finger request (e.g., finger 'a b c d e f g h'@host). Affects multiple Solaris releases; impact is limited to information disclosure of accou...
CVE-2002-1763
CVE-2002-1763 targets the Sun Solaris 8 CDE screensaver (dtscreen). The vulnerability arises when the Shift and Return keys are pressed repeatedly and quickly, causing a crash that enables local users to access the current session. The description does not specify a patch or workaround within the...
CVE-2002-1763
The dtscreen Sun Solaris 8 CDE screensaver crashes when the "Shift" and "Return" keys are pressed repeatedly and quickly, which allows local users to access the current session...
GLSA-200506-14 : Sun and Blackdown Java: Applet privilege escalation
The remote host is affected by the vulnerability described in GLSA-200506-14 Sun and Blackdown Java: Applet privilege escalation Both Sun's and Blackdown's JDK and JRE may allow untrusted applets to elevate privileges. Impact : A remote attacker could embed a malicious Java applet in a web page a...
Sun Java / BlackDown Java sandbox protection bypass
Applet can bypass sandbox limitation to exefute privileged functions...
[Full-disclosure] [ GLSA 200506-14 ] Sun and Blackdown Java: Applet privilege escalation
Gentoo Linux Security Advisory GLSA 200506-14 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...
java (jre, j2sdk)
Sun has released a couple of security advisories pertaining to both the Java Runtime Environment and the Standard Edition Development Kit. These could allow applets to read or write to local files. For more details, Sun's advisories may be found here:...
Sun Solaris lpadmin symbolic links problem
No description provided...
CVE-2005-2032
Unknown vulnerability in lpadmin on Sun Solaris 7, 8, and 9 allows local users to overwrite arbitrary files...
[SA15671] Java Web Start Sandbox Security Bypass Vulnerability
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
Sun Java JRE / Web Start Java Plug-in Untrusted Applet Privilege Escalation
The remote host is using a vulnerable version of Sun Java Runtime Plug-in, an web browser addon used to display Java applets. It has been reported that the JRE Plug-in Security can be bypassed. A remote attacker could exploit this by tricking a user into viewing a maliciously crafted web page...
CVE-2005-1889
Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files...
CVE-2005-1887
CVE-2005-1887 affects Sun Solaris 10 libc.so.1/libc and libproject components. Connected documents indicate Solaris 10 SPARC patch 119689-07 and x86 patch 118345-13 address the issue; patches target libc.so.1. The vulnerability is described as allowing local privilege escalation, with local acces...