SunOS <= 4.1.1 /usr/release/bin/winstall Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/22/info This applies to sites that have installed Sun Source tapes only. The Sun distribution of sources sunsrc has an installation procedure which creates the directory /usr/release/bin and installs two setuid root files...

SunOS <= 4.1.3 kmem setgid /etc/crash Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/59/info /etc/crash was installed setgid kmem and excutable by anyone. Any user can use the ! shell command escape to executes commands, which are then performed with group set to kmem. $ /etc/crash ! sh...

Linux pam_lib_smb < 1.1.6 /bin/login Remote Exploit

No description provided by source. / Linux pamlibsmb 1.1.6 /bin/login exploit by vertex Tested on Redhat 8.0, 9.0 Advisory at http://us2.samba.org/samba/ftp/pamsmb/ code based on : UClogin.c SunOS 5.6,5.7,5.8 remote /bin/login root exploit mikecc/unixclan...

SunOS Release 5.11 snv_101b - Remote IPv6 Crash Exploit

No description provided by source. / SunOS Release 5.11 Version snv101b Remote IPV6 Kernel Crash Exploit 0day By Kingcope/2009 / include stdio.h include string.h include stdlib.h include netinet/in.h include netdb.h include sys/time.h include sys/types.h include sys/socket.h include arpa/inet.h...

SunView (SunOS <= 4.1.1) selection_svc Vulnerability

No description provided by source. Source: http://www.securityfocus.com/bid/8/info On Sun3 and Sun4 systems, a remote system can read any file that is readable to the user running SunView. On the 386i, a remote system can read any file on the workstation running SunView regardless of protections...

UMN Gopherd 2.x Halidate Function Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1591/info It is possible to either execute arbitrary code or crash a remote system running University of Minnesota's Gopher Daemon, depending on the data entered. An unchecked buffer exists in the 'halidate' function of...

SunOS 5.7 Catman - Local Insecure tmp Symlink Clobber Exploit

No description provided by source. !/usr/local/bin/perl -w The problem is catman creates files in /tmp insecurly. They are based on the PID of the catman process, catman will happily clobber any files that are symlinked to that file. The idea of this script is to watch the process list for the...

Solaris/SPARC 2.5.1/2.6/7/8 Derived 'login' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions...

Solaris 2.x/7.0/8 Derived 'login' Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3681/info The 'login' program is used in UNIX systems to authenticate users with a username and password. The utility is typically invoked at the console, by 'telnetd', 'rlogind', and if configured to do so, SSH. Versions...

BSD/OS 2.1,FreeBSD <= 2.1.5,NeXTstep 4.x,IRIX <= 6.4,SunOS 4.1.3/4.1.4 lpr Buffer Overrun(1)

No description provided by source. / source: http://www.securityfocus.com/bid/707/info BSD/OS 2.1,FreeBSD 2.1.5,NeXTstep 4.0/4.1,SGI IRIX 6.4,SunOS 4.1.3/4.1.4 lpr Buffer Overrun Vulnerability 1 Due to insufficient bounds checking on arguments in this case -C which are supplied by users, it is...

SunOS <= 4.1.4 arp(8c) Memory Dump Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/291/info The version of arp8c which shipped with versions of SunOs 4.1.X could be used to dump system memory by using the -f flag. This flag causes the file filename to be read and multiple entries to be set in the ARP...

Netscape Enterprise Server 4.0/sparc/SunOS 5.7 - Remote Exploit

No description provided by source. !/usr/bin/perl Remote sploit for Netscape Enterprise Server 4.0/sparc/SunOS 5.7 usage: ns-shtml.pl 'command line' | nc victim port Sometimes server may hang or coredump.. eek ;- [email protected] $cmdline=echo 'ingreslock stream tcp nowait root /bin/sh sh -i...

Sun Solaris <= 10 snoop(1M) Utility Remote Exploit

No description provided by source. / hoagiesnoop.c SUN SOLARIS SNOOP REMOTE EXPLOIT + Sun Solaris 8/9/10 + OpenSolaris snv96 Bug discovered by Gael Delalleau http://www.securityfocus.com/bid/30556 attack:/exploits ./hoagiesnoop -t 192.168.0.1 hoagiesnoop.c - solaris snoop remote -andi / void.at...

[oss-security] Re: &#40;Linux kernel&#41; Bug#751417: linux-image-3.2.0-4-5kc-malta: no SIGKILL after prctl&#40;PR_SET_SECCOMP, 1, ...&#41; on MIPS

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 According to the manual page, after calling it with 1 as a second argument, any consecutive system calls other than read, write, exit and sigreturn should result in the delivery of SIGKILL. However, under MIPS any consecutive system call behaves as if...

Solaris 10 (sparc) : 151145-02 (deprecated)

SunOS 5.10: vntsd vcc patch. Date this patch was last updated by Sun : Jun/14/14 This plugin has been deprecated and either replaced with individual 151145 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 150401-06

SunOS 5.10x86: Kernel Patch. Date this patch was last updated by Sun : Dec/13/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is has been withdrawn. Disabled on 2014/02/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 10 (sparc) : 150400-06

SunOS 5.10: Kernel Patch. Date this patch was last updated by Sun : Dec/13/13 %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is has been withdrawn. Disabled on 2014/02/12. C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

Solaris 9 (sparc) : 113335-05

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite subcomponent: Filesystem. Supported versions that are affected are 8 and 9. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized...

Solaris 10 (sparc) : 149071-01 (deprecated)

SunOS 5.10: Texinfo patch. Date this patch was last updated by Sun : Jan/14/14 This plugin has been deprecated and either replaced with individual 149071 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on 2018/03/1...

Solaris 10 (x86) : 147144-17 (deprecated)

SunOS 5.10x86: iSCSI patch. Date this patch was last updated by Sun : Feb/18/13 This plugin has been deprecated and either replaced with individual 147144 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...