[SA14037] Sun Solaris UDP End Point Handling Denial of Service

TITLE: Sun Solaris UDP End Point Handling Denial of Service SECUNIA ADVISORY ID: SA14037 VERIFY ADVISORY: http://secunia.com/advisories/14037/ CRITICAL: Not critical IMPACT: DoS WHERE: Local system OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun Solaris 9...

Sun Java JRE Plug-in Capability Arbitrary Package Access

The remote host is using a vulnerable version of Sun Java Runtime Plug-in, a web browser addon used to display Java applets. Two security issues have been reported in the remote version of this product : - An untrusted applet may escalate its privileges in order to read, write or execute files on...

[SA13918] Sun Java Plug-In Two Vulnerabilities

TITLE: Sun Java Plug-In Two Vulnerabilities SECUNIA ADVISORY ID: SA13918 VERIFY ADVISORY: http://secunia.com/advisories/13918/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Sun Java SDK 1.4.x http://secunia.com/product/1661/ Sun Java SDK 1.3.x...

Sun Java plugin sandbox protection bypass

It's possible to break sandbox protection and access local files and applications...

CVE-2004-1356

Technical details about CVE-2004-1356 are not publicly available in the provided documents. No confirmed affected products, root cause, or remediation are described here. Monitor for updates from official sources.

CVE-2004-1352

Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code...

CVE-2004-1352

CVE-2004-1352 identifies a buffer overflow in the Solaris ping daemon affecting Sun Solaris versions 7 through 9. The vulnerability enables local users to execute arbitrary code due to the overflow in the ping component. The CVE description explicitly states local code execution as the impact. No...

CVE-2004-1357

The Secure Shell SSH Daemon SSHD in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities...

CVE-2004-1350

Multiple buffer overflows in Sun Java System Web Proxy Server formerly Sun ONE Proxy Server 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests...

CVE-2004-1345

Unknown vulnerability in Sun StorEdge Enterprise Storage Manager ESM 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access...

CVE-2004-1355

Technical details about CVE-2004-1355 are not publicly available in the provided documents; monitor for updates.

CVE-2004-1360

Unknown vulnerability in convfix in Sun Solaris 7 through 9, when invoked by convlpd, allows local users to overwrite arbitrary files...

CVE-2004-1360

The vulnerability CVE-2004-1360 concerns Sun Solaris versions 7–9, where the conv_fix function is exposed via conv_lpd. The root cause, as described, allows local users to overwrite arbitrary files, indicating a local-privilege/path-traversal like impact on file integrity. The sources provided (N...

CVE-2004-1359

CVE-2004-1359 affects Sun Solaris with uucp on versions 2.6, 7, 8, and 9. The vulnerability arises from multiple buffer overflows in uucp, allowing local users to execute arbitrary code as the uucp user. The connected documents confirm the affected component and the local-privilege impact; explic...

CVE-2004-1356

Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service system panic via unknown vectors...

CVE-2004-1345

The CVE refers to Sun StorEdge Enterprise Storage Manager (ESM) 2.1 on Solaris 8/9 with an unknown vulnerability that allows local users granted the ESMUser role to escalate to root. The existing sources describe the vulnerability impact as local privilege escalation but do not provide concrete t...

CVE-2004-1353

Technical details for CVE-2004-1353 are not publicly provided in the supplied documents. The records note an unknown LDAP vulnerability on Sun Solaris 8/9 with RBAC enabling local privilege escalation, but no concrete affected components, versions, or fixes are disclosed here. Monitor for updates.

CVE-2004-1358

The CVE-2004-1358 entry concerns Sun Solaris 9 where patches 114332-08 and 114929-06 disable the auditing functionality of the Basic Security Module (BSM). This degrades logging, allowing attackers to avoid activity logs. The vulnerability details specify that the affected component is the BSM au...

CVE-2004-1350

Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6–3.6 SP4 contains multiple buffer overflows that allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests. The issue affects the proxy server’s handling of input in its network-facing compon...

CVE-2004-1357

The CVE describes a flaw in the Sun Solaris 9 SSHD where IP addresses are not properly logged when ListenAddress is configured to 0.0.0.0. The affected component is the SSH Daemon (SSHD) for Solaris 9. The underlying issue is improper logging of source addresses, which can help remote attackers o...