Solaris 10 (x86) : 118345-13

SunOS 5.10x86: ld & libc.so.1 Patch. Date this patch was last updated by Sun : Jan/10/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 118560-02

SunOS 5.10: usr/bin/telnet patch. Date this patch was last updated by Sun : Sep/14/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (x86) : 118561-02

SunOS 5.10x86: usr/bin/telnet patch. Date this patch was last updated by Sun : Sep/15/06 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/09/17. C Tenable Network Security, Inc. if !...

Solaris 10 (sparc) : 119757-43 (deprecated)

SunOS 5.10: Samba patch. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 119757 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/12...

Solaris Socket Hijack

/ $ An open security advisory 7 - SUN Solaris SOREUSEADDR Local Socket Hijack Bug 1: Bug Researcher: c0ntex - c0ntexbatgmail.com 2: Bug Released: July 06 2005 3: Bug Impact Rate: Medium / Hi 4: Bug Scope Rate: Local / Remote $ This advisory and/or proof of concept code must not be used for...

Solaris 9 (x86) : 119450-02

SunOS 5.9x86: Perl Patch. Date this patch was last updated by Sun : Mar/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 9 (sparc) : 119449-02

SunOS 5.9: Perl Patch. Date this patch was last updated by Sun : Mar/31/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid1860...

Solaris 910 - ld.so Local Privilege Escalation (1)

Solaris 910 - ld.so Local Privilege Escalation 1 / - SunOS 5.10 Generic i86pc i386 i86pc - SunOS 5.9 Generic112233-12 sun4u It does NOT work on: SunOS 5.8 Generic117350-02 sun4u sparc Example on unpatched Solaris 10 AMD64: atari:venglin: cat dupa.c / static char sh =...

[Full-disclosure] Solaris 9/10 ld.so fun

ld.so from Solaris 9 and 10 doesn't check LDAUDIT environment variable when running sugid binaries, allowing to run arbitrary code with elevated privileges. Well, I can't belive, that such trivial vulnerability exists in modern OS... The following PoC code was tested on: - SunOS 5.10 Generic i86p...

CVE-2001-1503

Vulnerability: The finger daemon (in.fingerd) in Sun Solaris 2.5–8 and SunOS 5.5–5.8 allows remote attackers to list all user accounts by sending a crafted finger request (e.g., finger 'a b c d e f g h'@host). Affects multiple Solaris releases; impact is limited to information disclosure of accou...

Solaris 7 (x86) : 119424-01

SunOS 5.7x86: X.500 Directory fnctxx500.so.1 Patch. Date this patch was last updated by Sun : May/05/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. i...

Solaris 7 (sparc) : 119423-01

SunOS 5.7: X.500 Directory fnctxx500.so.1 Patch. Date this patch was last updated by Sun : May/05/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 8 (sparc) : 116997-01

SunOS 5.8: Federated Naming Service FNS X500 patch. Date this patch was last updated by Sun : May/04/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'...

Solaris 8 (x86) : 116998-01

SunOS 5.8x86: Federated Naming Service FNS X500 patch. Date this patch was last updated by Sun : May/04/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (x86) : 117486-01

SunOS 5.9x86: fnctxx500.so.1 Patch. Date this patch was last updated by Sun : May/04/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

CVE-1999-1580

CVE-1999-1580 affects SunOS sendmail 5.59–5.65. The bug arises from using popen to process a forwarding host argument, enabling local users to gain root privileges by manipulating the IFS variable and passing crafted values to the -oR option. This creates a local privilege escalation vector. Publ...

CVE-1999-1580

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS Internal Field Separator variable and passing crafted values to the -oR option...

CVE-1999-1580

SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS Internal Field Separator variable and passing crafted values to the -oR option...

Solaris 7 (sparc) : 107293-02

SunOS 5.7: libgss.so.1 and gsscred patch. Date this patch was last updated by Sun : Apr/13/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...

Solaris 7 (x86) : 107294-02

SunOS 5.7x86: libgss.so.1 and gsscred patch. Date this patch was last updated by Sun : Apr/13/05 %NASLMINLEVEL 999999 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a recommended security fix. Disabled on 2011/10/24. C Tenable Network Security, Inc. if !...