9002 matches found
Sun Solaris arp flood DoS
ARP flood causes system to hang...
[SA14285] Sun Solaris FTP Server PASV Commands Denial of Service
TITLE: Sun Solaris FTP Server PASV Commands Denial of Service SECUNIA ADVISORY ID: SA14285 VERIFY ADVISORY: http://secunia.com/advisories/14285/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Sun Solaris 7 http://secunia.com/product/93/ Sun Solaris 8...
[SA14286] Sun Solaris ARP Flooding Denial of Service Vulnerability
TITLE: Sun Solaris ARP Flooding Denial of Service Vulnerability SECUNIA ADVISORY ID: SA14286 VERIFY ADVISORY: http://secunia.com/advisories/14286/ CRITICAL: Less critical IMPACT: DoS WHERE: From local network OPERATING SYSTEM: Sun Solaris 7 http://secunia.com/product/93/ Sun Solaris 8...
Sun Solaris FTP server system wide DoS
By issuing PASV command it's possible to consume all available TCP ports...
Sun Java Plugin may create temporary files with predictable names
Overview The Sun Java Plugin may allow remote users to create files with arbitrary content in a specific location. Description From the Sun Java Plugin page:Java Plug-in technology, included as part of the Java 2 Runtime Environment, Standard Edition JRE, establishes a connection between popular...
CVE-2004-1394
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the execattr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges...
CVE-2003-1058
The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access DGA mode, allows local users to cause a denial of service Xsun crash or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files...
CVE-2003-1055
The CVE-2003-1055 issue affects Sun Solaris 8 and 9 via the nss_ldap.so.1 library. The vulnerability is a buffer overflow caused by a long hostname used in an LDAP lookup, which can allow local users to gain root access. The connected records corroborate Solaris versions and the nss_ldap.so.1 com...
CVE-2003-1082
Buffer overflow in utmpupdate for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than CVE-2003-1068...
CVE-2003-1058
The CVE concerns the Xsun server on Sun Solaris (versions 2.6–9) when running in Direct Graphics Access (DGA) mode. A local user can trigger a denial-of-service (Xsun crash) or gain the ability to create/overwrite arbitrary files, probably via a symlink attack on temporary server files. Affected ...
CVE-2004-1393
Unknown vulnerability in the tcsetattr function for Sun Solaris for SPARC 2.6, 7, and 8 allows local users to cause a denial of service system hang...
CVE-2003-1068
CVE-2003-1068 is a Solaris utmp_update buffer‑overflow vulnerability affecting Solaris 2.6–9 that can allow local users to gain root privileges. The connected OpenVAS entries reference the Solaris update 113650-02 for /usr/lib/utmp_update, indicating a patch is available. The CVE description note...
CVE-2004-1394
An advisory for CVE-2004-1394 describes a local privilege escalation in Sun Solaris 8 and 9. The pfexec function fails to properly handle an invalid entry in the exec_attr database within a custom rights profile, potentially allowing local users with such profiles to execute profile commands with...
CVE-2003-1057
Unknown vulnerability in CDE Print Viewer dtprintinfo for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code...
CVE-2004-1393
Technical details about CVE-2004-1393 are not publicly available in the provided documents. No concrete affected products, impact description, or remediation are described here. Monitor for updates as additional information is released.
CVE-2003-1056
The CVE-2003-1056 entry concerns the ed editor on Sun Solaris 2.6, 7, and 8. It describes a local vulnerability where an attacker can create or overwrite arbitrary files through a symlink attack on temporary files, with complete confidentiality, integrity, and availability impact per CVSS. The vu...
CVE-2003-1057
Technical details about CVE-2003-1057 are not publicly available in the provided documents. Monitor for updates.
CVE-2003-1055
Buffer overflow in the nssldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup...
[SA13992] Sun Solaris DHCP Administration Utilities Vulnerability
TITLE: Sun Solaris DHCP Administration Utilities Vulnerability SECUNIA ADVISORY ID: SA13992 VERIFY ADVISORY: http://secunia.com/advisories/13992/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ DESCRIPTION: A...