Advisory CA-2002-10 Format String Vulnerability in rpc.rwalld

CERT Advisory CA-2002-10 Format String Vulnerability in rpc.rwalld Original release date: May 1, 2002 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected Sun Solaris 2.5.1, 2.6, 7, and 8 Overview The rwall daemon rpc.rwalld is a...

eSecurityOnline Security Advisory 4197 - Sun Solaris cachefsd den ial of service vulnerability

eSO Security Advisory: 4197 Discovery Date: October 29, 2001 ID: eSO:4197 Title: Sun Solaris cachefsd denial of service vulnerability Impact: Remote attackers can cause a denial of service condition Affected Technology: Solaris 2.6, 7, 8 SPARC and x86 Vendor Status: Vendor notified Discovered By:...

eSecurityOnline Security Advisory 4123 - Sun Solaris admintool me dia installation path buffer overflow vulnerability

eSO Security Advisory: 4123 Discovery Date: October 15, 2001 ID: eSO:4123 Title: Sun Solaris admintool media installation path buffer overflow vulnerability Impact: Local attackers can gain root privileges Affected Technology: Sun Solaris 2.6,7,8 SPARC and x86 Vendor Status: Vendor notified...

eSecurityOnline Security Advisory 3761 - Sun Solaris lbxproxy display name buffer overflow vulnerability

eSO Security Advisory: 3761 Discovery Date: July 5, 2001 ID: eSO:3761 Title: Sun Solaris lbxproxy display name buffer overflow vulnerability Impact: Local attackers can gain group root privileges Affected Technology: Sun Solaris 8 x86 Vendor Status: Vendor notified Discovered By: Kevin Kotas of t...

eSecurityOnline Security Advisory 4198 - Sun Solaris cachefsd mou nt file buffer overflow vulnerability

eSO Security Advisory: 4198 Discovery Date: October 29, 2001 ID: eSO:4198 Title: Sun Solaris cachefsd mount file buffer overflow vulnerability Impact: Local attackers can gain root privileges Affected Technology: Solaris 2.6, 7, 8 SPARC and x86 Vendor Status: Vendor notified Discovered By: Kevin...

eSecurityOnline Security Advisory 2397 - Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities

eSO Security Advisory: 2397 Discovery Date: March 28, 2000 ID: eSO:2397 Title: Sun Solaris admintool -d and PRODVERS buffer overflow vulnerabilities Impact: Local attackers can gain root privileges Affected Technology: Solaris 2.5, 2.5.1, 2.6, 7, 8 SPARC and x86 Vendor Status: Patches are availab...

NSFOCUS SA2002-01: Sun Solaris Xsun "-co" heap overflow

NSFOCUS Security AdvisorySA2002-01 Topic: Sun Solaris Xsun "-co" heap overflow Release Date: 2002-4-02 CVE CAN ID : CAN-2002-0158 Affected system: ================ - Sun Solaris 2.6 SPARC/x86 - Sun Solaris 7 SPARC/x86 - Sun Solaris 8 SPARC/x86 Impact: ========= NSFOCUS Security Team has found a...

Security Bulletin #00217

Courtesy of Sun Microsystems. -----BEGIN PGP SIGNED MESSAGE----- Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00217 Date: March 18, 2002 Cross-Ref: Title: JavaTM Web Start The information contained in this Security Bulletin is provided "AS IS." Sun makes no warranties of any kind...

CVE-1999-1478

The CVE-1999-1478 entry concerns Sun’s HotSpot Performance Engine VM. A remote attacker can cause a denial of service on any server running HotSpot by issuing a URL that includes the [ character. The connected records confirm the affected component (Sun HotSpot Performance Engine VM) and the expl...

CVE-1999-1507

Technical details for CVE-1999-1507 are not publicly available in the provided documents; monitor for updates.

CVE-1999-1478

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the character...

CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service...

CVE-2001-0701

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument...

CVE-2001-0701

The CVE-2001-0701 issue affects the SunVTS package (Sun Microsystems) and its ptexec binary. ptexec in SUNWvts is vulnerable to a buffer overflow when an overly long -o argument (roughly 400+ characters) is supplied, allowing a local user to execute arbitrary code with root privileges. SunVTS ver...

CVE-2001-0634

Sun Chili!Soft ASP has weak permissions on various configuration files, enabling a local attacker to gain additional privileges and cause a denial of service. Affected product: Sun Chili!Soft ASP. Root cause: insecure/weak permissions on configuration files. CVSS v2 base score 7.2 (HIGH) with loc...

Immunity Canvas: IN_LPD

Name| inlpd ---|--- CVE| CVE-2001-1583 Exploit Pack| CANVAS Description| in.lpd Notes| References: http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert%2F41664&zone32=category%3Asecurity%20lpd CVE Name: CVE-2001-1583 VENDOR: Sun Date public: 08/31/2001 CERT Advisory:...

CVE-2001-1479

smcboot in Sun SMC Sun Management Center 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMCPORT...

CVE-2001-1582

Buffer overflow in the LDAP naming services library libsldap in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAPOPTIONS environment variable to a privileged program that uses libsldap...

CVE-2001-1503

The finger daemon in.fingerd in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host...

KLA10345 SB vulnerability in SUN JRE & JDK

An unspecified vulnerability was found in Sun JRE & JDK. By exploiting this vulnerability malicious users can access the clipboard. This vulnerability can be exploited remotely via a specially designed applet. Original advisories - Related products Sun-Java-JRE CVE list CVE-2001-1480 high Solutio...