Integer overflow in xdr_array() function when deserializing the XDR stream

Overview There is an integer overflow present in the xdrarray function distributed as part of the Sun Microsystems XDR library. This overflow has been shown to lead to remotely exploitable buffer overflows in multiple applications, leading to the execution of arbitrary code. Although the library...

ISS Security Brief: Remote Buffer Overflow Vulnerability in Sun RPC

Internet Security Systems Security Brief July 31, 2002 Remote Buffer Overflow Vulnerability in Sun RPC Synopsis: Internet Security Systems ISS X-Force has discovered a buffer overflow in the xdrarray filter primitive. This function is a part of the Sun RPC library, and it is used in multiple RPC...

CVE-2002-0686

Buffer overflow in the search component for iPlanet Web Server iWS 4.1 and Sun ONE Web Server 6.0 allows remote attackers to execute arbitrary code via a long argument to the NS-rel-doc-name parameter...

Sun iPlanet and ONE Web Servers contain a buffer overflow in the search engine

Overview The Sun iPlanet Web Server and Sun ONE Web Server both ship with a search engine that is not enabled by default. A remotely exploitable buffer overflow exists in the search engine that could permit an attacker to execute arbitrary code on the system. Description The Sun iPlanet Web Serve...

CVE-2002-0686

The CVE-2002-0686 entry describes a remote code execution condition in the search component of Sun iPlanet Web Server 4.1 and Sun ONE Web Server 6.0 caused by a buffer overflow when processing a long value for the NS-rel-doc-name parameter. Affected products expose this through the search engine,...

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the...

Sun i-Runbook 2.5.2 - Directory and File Content Disclosure

source: https://www.securityfocus.com/bid/5209/info Sun i-Runbook is a single point of technical and administration management for Sun production environments. i-Runbook provides a web interface. i-Runbook can be led to disclose the contents of a known resource. This is accomplished by submitting...

Cobalt Linux 6.0 - RaQ (Authenticated) Privilege Escalation

Cobalt Linux 6.0 - RaQ Authenticated Privilege Escalation source: https://www.securityfocus.com/bid/5695/info Sun has released an advisory warning that it is possible for local users to escalate priveleges on Sun/Cobalt RaQ or Qube systems, by exploiting a vulnerability located in...

Cobalt Linux 6.0 - RaQ (Authenticated) Privilege Escalation

source: https://www.securityfocus.com/bid/5695/info Sun has released an advisory warning that it is possible for local users to escalate priveleges on Sun/Cobalt RaQ or Qube systems, by exploiting a vulnerability located in /usr/lib/authenticate. !/bin/sh Cobalt Linux 6.0 Local Root Exploit...

CVE-2002-0360

Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...

CVE-2002-0430

MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php...

CVE-2002-0430

CVE-2002-0430 affects the Sun Cobalt RaQ XTR admin interface. The MultiFileUploadHandler.php allows a local attacker to bypass authentication via a symlink attack on a temporary file, then trigger MultiFileUpload.php to overwrite arbitrary files. The vulnerability is local with high attack comple...

CVE-2002-0436

sscdsuncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter...

CVE-2002-0436

The CVE-2002-0436 entry maps to the SunSolve CD package: the CGI script sscd_suncourier.pl does not validate the email parameter, enabling remote command execution via shell metacharacters. Documented by NVD/Nessus/OpenVAS references, this is a clientless, remote issue affecting Sunsolve CD CGI i...

Sun JavaServer Default Admin Password

The remote host is running the Sun JavaServer. This server has the default username and password of admin. An attacker can use this to gain complete control over the web server configuration and possibly execute commands. %NASLMINLEVEL 70300 This script written by H D Moore See the Nessus Scripts...

CVE-2002-0360

The CVE-2002-0360 issue affects Sun AnswerBook2 1.4–1.4.3, where a buffer overflow in the gettransbitmap CGI allows a remote attacker to execute arbitrary code via a long filename argument. Impact is remote code execution with the daemon privileges; no exploit details are provided in the document...

CVE-2002-0360

Buffer overflow in Sun AnswerBook2 1.4 through 1.4.3 allows remote attackers to execute arbitrary code via a long filename argument to the gettransbitmap CGI program...

eSecurityOnline advisory 5063 - Sun AnswerBook2 gettransbitmap buffer overflow vulnerability

eSO Security Advisory: 5063 Discovery Date: March 1, 2002 ID: eSO:5063 Title: Sun AnswerBook2 gettransbitmap buffer overflow vulnerability Impact: Remote attackers can execute arbitrary code. Affected Technology: Sun AnswerBook2 1.4, 1.4.1, 1.4.2, 1.4.3 Vendor Status: Vendor notified. Discovered...

Advisory CA-2002-11 Heap Overflow in Cachefs Daemon (cachefsd)

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2002-11 Heap Overflow in Cachefs Daemon cachefsd Original release date: May 06, 2002 Last revised: Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Sun Solaris 2.5.1, 2.6, 7, and 8 SPARC and Inte...

Sun Solaris cachefsd vulnerable to heap overflow in cfsd_calloc() function via long string of characters

Overview Sun's NFS/RPC cachefs daemon cachefsd is shipped and installed by default with Sun Solaris 2.5.1, 2.6, 7, and 8 SPARC and Intel architectures. Cachefsd caches requests for operations on remote file systems mounted via the use of NFS protocol. A remotely exploitable heap overflow exists i...