9002 matches found
CVE-2004-1350
Multiple buffer overflows in Sun Java System Web Proxy Server formerly Sun ONE Proxy Server 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests...
[SA12873] Sun Solaris LDAP and RBAC Privilege Escalation Vulnerability
TITLE: Sun Solaris LDAP and RBAC Privilege Escalation Vulnerability SECUNIA ADVISORY ID: SA12873 VERIFY ADVISORY: http://secunia.com/advisories/12873/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ Sun Solari...
CVE-2004-1353
Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control RBAC, allows local users to execute certain commands with additional privileges...
Sun Solaris gzip may change permissions of hard linked files
Overview Sun Solaris gzip contains a vulnerability that may change the permissions of hard linked files. The specific impact may allow hard linked files compressed by gzip to become readable and able to be modified by unprivileged users. Description Gzip is a utility used for compressing and...
Solaris 7 (sparc) : 108414-07
SunOS 5.7: /usr/bin/cpio patch. Date this patch was last updated by Sun : Sep/27/04 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...
Solaris 8 (i386) : 112098-08
The remote host is missing Sun Security Patch number 112098-08 SunOS 5.8x86: /usr/bin/cpio patch. Date this patch was last updated by Sun : Thu May 29 05:52:20 MDT 2008 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecate...
[SA12470] Sun Solaris in.named Dynamic Update Denial of Service Vulnerability
TITLE: Sun Solaris in.named Dynamic Update Denial of Service Vulnerability SECUNIA ADVISORY ID: SA12470 VERIFY ADVISORY: http://secunia.com/advisories/12470/ CRITICAL: Not critical IMPACT: DoS WHERE: From remote OPERATING SYSTEM: Sun Solaris 8 http://secunia.com/product/94/ DESCRIPTION: A...
Sun Enterprise Storage Manager may allow an unprivileged local user to gain root access
Overview A vulnerability exists in Sun StorEdge Enterprise Storage Manager ESM that may allow unauthorized local users to gain root privileges. Description The Sun StorEdge Enterprise Storage Manager ESM version 2.1 for the Sun SPARC platform may allow non-root local users assigned the "EMSUser"...
CVE-2002-1141
An input validation error in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service via malformed fragmented RPC client packets, aka "Denial of service by sending an invalid RPC...
CVE-2002-1140
CVE-2002-1140 corresponds to a vulnerability in Microsoft Services for UNIX 3.0 Interix SDK (RPC library) where a buffer overrun via an RPC request containing an improper parameter size check can allow a remote attacker to mount a denial-of-service against the RPC server. The issue is described a...
CVE-2002-1361
CVE-2002-1361 affects Sun Cobalt RaQ4 with the Security Hardening Patch (SHP) installed. The overflow.cgi CGI script did not properly filter input, allowing a POST to set the email parameter to shell metacharacters and enabling remote code execution with superuser privileges. Public sources descr...
CVE-2002-1140
The Sun Microsystems RPC library Services for Unix 3.0 Interix SD, as implemented on Microsoft Windows NT4, 2000, and XP, allows remote attackers to cause a denial of service service hang via malformed packet fragments, aka "Improper parameter size check leading to denial of service."...
CVE-2003-0027
Directory traversal vulnerability in Sun Kodak Color Management System KCMS library service daemon kcmsserver allows remote attackers to read arbitrary files via the KCSOPENPROFILE procedure...
CVE-2003-0027
The CVE-2003-0027 vulnerability affects Sun KCMS kcms_server on Solaris. The KCS_OPEN_PROFILE call does not properly validate the fileName, allowing a remote attacker to perform directory traversal and read arbitrary files. The ToolTalk database server (rpc.ttdbserverd) TT_ISBUILD() procedure can...
CVE-2002-1361
overflow.cgi CGI script in Sun Cobalt RaQ 4 with the SHP Security Hardening Patch installed allows remote attackers to execute arbitrary code via a POST request with shell metacharacters in the email parameter...
CVE-2002-1141
The CVE-2002-1141 issue is a vulnerability in the Sun Microsystems RPC library Services for Unix 3.0 Interix SD, executed on Windows NT4/2000/XP. It stems from an input validation error that can be exploited by malformed fragmented RPC client packets, enabling a remote denial of service. The docu...
CVE-2002-1265
CVE-2002-1265 is evidenced in HP-UX RPC-related DoS advisories; OpenVAS/Nessus entries (PHNE_30091/30092/30093/30094, and PHKL_31500) reference CVE-2002-1265 as the RPC/HP-UX RPC DoS issue. Patches exist (HPSBUX01020 SSRT2384, etc.; PHKL_31500 consolidates fixes) addressing remote DoS via HP-UX R...
CVE-2002-0387
CVE-2002-0387 refers to a buffer overflow in the gxnsapi6.dll NSAPI plugin of the Sun ONE Application Server’s Connector Module. The overflow occurs when handling a long HTTP request URL, enabling a remote attacker to potentially execute arbitrary code on affected hosts. The issue affects Sun ONE...
CVE-2002-1265
The Sun RPC functionality in multiple libc implementations does not provide a time-out mechanism when reading data from TCP connections, which allows remote attackers to cause a denial of service hang...