Solaris 10 (x86) : 120037-22

SunOS 5.10x86: libc nss ldap PAM zfs patc. Date this patch was last updated by Sun : Jul/17/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 7 (sparc) : 124520-05

N1 Grid Engine 6.0: maintenance patch. Date this patch was last updated by Sun : Sep/18/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 10 (x86) : 124923-03

SunOS 5.10x86: ld.so.1 patch. Date this patch was last updated by Sun : Apr/09/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrando...

Solaris 10 (sparc) : 124922-03

SunOS 5.10: ld.so.1 patch. Date this patch was last updated by Sun : Apr/09/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if ! definedfunc"bnrandom"...

Solaris 9 (sparc) : 123372-02

SunOS 5.9: rm patch. Date this patch was last updated by Sun : Feb/06/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24404;...

Solaris 8 (sparc) : 124969-01

SunOS 5.8: rm patch. Date this patch was last updated by Sun : Feb/06/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid24399;...

Solaris 9 (x86) : 123373-02

SunOS 5.9x86: rm patch. Date this patch was last updated by Sun : Feb/06/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris telnetd authentication bypass

Added: 02/16/2007 CVE: CVE-2007-0882 BID: 22512 OSVDB: 31881 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program in Solaris 10 and 11...

Solaris telnetd authentication bypass

Added: 02/16/2007 CVE: CVE-2007-0882 BID: 22512 OSVDB: 31881 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program in Solaris 10 and 11...

Solaris telnetd authentication bypass

Added: 02/16/2007 CVE: CVE-2007-0882 BID: 22512 OSVDB: 31881 Background The Telnet service allows remote users to authenticate to a system and use an interactive command shell. The Telnet service is implemented by the Telnet daemon, telnetd. Problem The telnetd program in Solaris 10 and 11...

SunOS 5.10/5.11 TELNET服务远程绕过认证漏洞

SunOS是一款由Sun开发和维护的商业性质UNIX操作系统。 SunOS 5.10/5.11的TELNET服务在处理畸形的认证数据时存在漏洞，远程攻击者可能利用此漏洞绕过认证获得访问。 SunOS 5.10/5.11的Telnet守护进程未经检查将用户可能提交的畸形参数直接传递给login进程处理，login进程由此执行非预期的用户身份切换操作。这可能允许用户无需口令便可以某些特权用户权限登录到系统，获得完全的系统访问，如果系统未能对root用户登录位置作限制，获取root用户访问也是可能的。目前这个漏洞正在被积极的利用。 SunOS 5.11 SunOS 5.10 时解决方法：...

Solaris 10 (x86) : 120069-03

SunOS 5.10x86: in.telnetd patch. Date this patch was last updated by Sun : Feb/21/07 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

solaris-ohday.txt

!/bin/sh CLASSIFIED CONFIDENTIAL SOURCE MATERIAL ATTENTION THIS CODE MUST NOT BE DISCLOSED TO ANY THIRD PARTIES C COPYRIGHT Kingcope, 2007 echo "" echo "SunOS 5.10/5.11 in.telnetd Remote Exploit by Kingcope [email protected]" if $ -ne 2 ; then echo "./sunos " echo "./sunos localhost bin" exit fi...

Design/Logic Flaw

Argument injection vulnerability in the telnet daemon in.telnetd in Solaris 10 and 11 SunOS 5.10 and 5.11 misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the...

CVE-2007-0882

CVE-2007-0882 affects Sun Solaris in.telnetd (Solaris 10/11, SunOS 5.10/5.11). The vulnerability is an argument-injection flaw that misinterprets certain client "-f" sequences as login requests, enabling remote login bypass (e.g., to bin account) without authentication. Public exploit indications...

SunOS 5.10/5.11 in.telnetd Remote Authentication Bypass Exploit

No description provided by source. !/bin/sh CLASSIFIED CONFIDENTIAL SOURCE MATERIAL ATTENTION THIS CODE MUST NOT BE DISCLOSED TO ANY THIRD PARTIES C COPYRIGHT Kingcope, 2007 echo "" echo "SunOS 5.10/5.11 in.telnetd Remote Exploit by Kingcope [email protected]" if $ -ne 2 ; then...

SunOS 5.105.11 in.TelnetD - Remote Authentication Bypass

SunOS 5.105.11 in.TelnetD - Remote Authentication Bypass !/bin/sh CLASSIFIED CONFIDENTIAL SOURCE MATERIAL ATTENTION THIS CODE MUST NOT BE DISCLOSED TO ANY THIRD PARTIES C COPYRIGHT Kingcope, 2007 echo "" echo "SunOS 5.10/5.11 in.telnetd Remote Exploit by Kingcope [email protected]" if $ -ne 2 ; th...

SunOS 5.10/5.11 in.telnetd Remote Authentication Bypass Exploit

Exploit for solaris platform in category remote exploits =============================================================== SunOS 5.10/5.11 in.telnetd Remote Authentication Bypass Exploit =============================================================== !/bin/sh CLASSIFIED CONFIDENTIAL SOURCE MATERIAL...

SunOS 5.10/5.11 in.TelnetD - Remote Authentication Bypass

!/bin/sh CLASSIFIED CONFIDENTIAL SOURCE MATERIAL ATTENTION THIS CODE MUST NOT BE DISCLOSED TO ANY THIRD PARTIES C COPYRIGHT Kingcope, 2007 echo "" echo "SunOS 5.10/5.11 in.telnetd Remote Exploit by Kingcope [email protected]" if $ -ne 2 ; then echo "./sunos " echo "./sunos localhost bin" exit fi...

Solaris 9 (x86) : 123369-01

SunOS 5.9x86: tip patch. Date this patch was last updated by Sun : Jan/12/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...