CVE-2010-2383

CVE-2010-2383 (Solaris/OpenSolaris NFS): Unspecified vulnerability in Solaris 8/9/10/OpenSolaris related to NFS that allows a local unprivileged user to affect confidentiality and integrity by abusing unsafe use of temporary files in nfslogd. The public disclosure shows an unprivileged user can c...

CVE-2010-3515

CVE-2010-3515 affects Solaris/OpenSolaris kernels: Solaris 9/10 and OpenSolaris, in the Kernel/Disk Driver. The vulnerability is described as unspecified in the Solaris component, with local access required for exploit and potential impact on availability. The Oracle Oct 2010 CPU advisory and rel...

CVE-2009-2857

CVE-2009-2857 affects Sun Solaris 8–10 and OpenSolaris prior to snv_103. The kernel mishandles the interaction between the filesystem and virtual-memory subsystems, allowing local users to trigger a deadlock and system halt by performing mmap and write operations on the same file. Impact is a loc...

CVE-2009-3519

CVE-2009-3519 affects the kernel IP module in Sun Solaris 8–10 and OpenSolaris up to snv_109. The issue is multiple memory leaks in STREAMS handling (vectors M_DATA, M_PROTO, M_PCPROTO, M_SIG) that allow local users to cause a denial of service via memory consumption. The description does not spe...

CVE-2010-0916

CVE-2010-0916 corresponds to a Solaris/OpenSolaris 10 vulnerability in rdist that allows local users to affect confidentiality, integrity and availability. The connected Oracle CPU July 2010 advisory indicates patches across multiple Sun/OpenSolaris components; exploitation details are not provid...

CVE-2010-3503

Oracle Solaris 10/OpenSolaris local vulnerability CVE-2010-3503 resides in the su command: when inheriting environment variables, a malloc() may return NULL, and a subsequent strcpy() can dereference it, causing a crash (segmentation fault). Public sources (e.g., exploit/packetstorm references) d...

CVE-2010-0083

CVE-2010-0083 maps to a Solaris/OpenSolaris vulnerability in the ToolTalk rpc.ttdbserverd database parser, enabling remote exploitation via crafted .rec files. The HP advisory notes remote code execution by disabling rpc.ttdbserver (inetd.config entry), and the PacketsStorm PoCs show SPARC/x86 ex...

CVE-2010-3576

CVE-2010-3576 is a local vulnerability affecting Oracle Solaris 8, 9, 10 and OpenSolaris in the SCSI enclosure services device driver. The issue can affect integrity and availability (partial impact) but requires local access (no remote exploitation). The CVSS 2.0 base score is 3.6 (LOW) with low...

CVE-2010-2393

CVE-2010-2393 affects Oracle Solaris 10 and OpenSolaris. The connected Solaris entry identifies a local vulnerability tied to the kernel RPC subsystem that can impact availability. The advisory notes a local-exploit scenario (no remote access) and a high impact on availability, with no explicit e...

CVE-2010-2386

CVE-2010-2386 is a local vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, affecting the GigaSwift Ethernet Driver and potentially impacting availability via local exploitation. The vulnerability is described as unspecified with unknown vectors. Public documents confirm that it resid...

CVE-2010-3516

CVE-2010-3516 pertains to Oracle Solaris/OpenSolaris uDAPL/InfiniBand. The vulnerability is local to the system (local user required) and can affect availability via InfiniBand-related vectors. Connected docs confirm a Solaris InfiniBand issue (uDAPL) with local access and no remote exploitation ...

CVE-2010-3517

CVE-2010-3517 is described as an unspecified local vulnerability affecting Oracle Solaris 10 and OpenSolaris, related to the kernel on x86. The connected documents confirm the vulnerability is located in the Solaris kernel/X86 component and is locally exploitable with the goal of impacting availa...

CVE-2010-3540

The connected Oracle CPU October 2010 documents identify CVE-2010-3540 as a Solaris 10/OpenSolaris vulnerability affecting ZFS. The flaw is listed as Local, with CVSS v2 base score 4.0 (Medium) and no remote/external access required. The vulnerability is categorized as a ZFS- related issue, affec...

CVE-2010-2399

CVE-2010-2399 affects Oracle Solaris 10 and OpenSolaris (Kernel/VM). Descriptions specify a local vulnerability that can impact availability via unknown vectors; root cause and exploit details are not disclosed in the provided documents. No patch/fix details are given for this CVE within the conn...

CVE-2010-2392

CVE-2010-2392 affects Oracle Solaris 10 and OpenSolaris, with the vulnerability in ZFS allowing local users to affect integrity and availability. The connected Oracle CPU July 2010 advisory lists CVE-2010-2392 under the Solaris section with ZFS as the affected component and Local access required ...

CVE-2010-3542

CVE-2010-3542 concerns an unspecified local vulnerability in Oracle Solaris 8/9/10 and OpenSolaris, related to USB. The flaw allows a local user to affect confidentiality (Partial impact) and is identified in the Solaris USB subsystem. The vulnerability is detailed in the CVE entry; exploitation ...

CVE-2010-0882

Technical details about CVE-2010-0882 are not provided in the supplied documents. The initial description notes an unspecified local vulnerability in Solaris/OpenSolaris Trusted Extensions but does not disclose affected components, versions, vectors, or remediation. Monitor for updates from Oracl...

CVE-2010-3513

CVE-2010-3513 affects Solaris 9/10 and OpenSolaris; vulnerability in Device Drivers allows local attackers to impact integrity and availability . CVSS v2 base score: 2.4 (LOW) , with local access and high complexity. The provided documents do not specify exploit details or a patch version; consul...

CVE-2010-2400

CVE-2010-2400 is reported as an unspecified local vulnerability in Oracle Solaris 9/10 and OpenSolaris, affecting Kernel/Filesystem and hindering availability. The CVE entry is supported by Oracle’s July 2010 Critical Patch Update documentation, which lists Solaris kernel/Filesystem fixes among 5...

CVE-2009-2282

The CVE-2009-2282 issue affects Sun Solaris 10 on SPARC and OpenSolaris snv_41–snv_108, where the Virtual Network Terminal Server daemon (vntsd) does not validate authorization for guest console access. This allows local control-domain users to obtain guest-domain privileges via unspecified vecto...

CVE-2010-0889

The CVE-2010-0889 entry concerns an unspecified local confidentiality vulnerability in the Solaris/OpenSolaris kernel (snv_68–snv_128). Affected: Solaris/OpenSolaris components; attack scope and root cause remain under-specified. The linked references indicate Oracle CPU APR2010/CPUAPR2010-099504...

CVE-2010-3511

CVE-2010-3511 is a Solaris vulnerability affecting Tooltalk that can be exploited by a local attacker to impact integrity and availability (CVSS 2.6, LOCAL, HIGH complexity). The description in the connected documents confirms the affected platform (Solaris/OpenSolaris) and the local vector, with...

CVE-2010-0890

CVE-2010-0890 affects Solaris/OpenSolaris: Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv_01–snv_98 has an unspecified vulnerability that allows local users to affect availability via kernel-related vectors. The NVD entry provides limited detail (no explicit root cause, vect...

CVE-2010-0895

Technical details (vulnerability type, affected versions, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates for concrete information.

CVE-2010-3580

CVE-2010-3580 affects Oracle/OpenSolaris; the vulnerability is described as unspecified, local, related to Kernel/File System, with availability impact. The Oracle October 2010 Critical Patch Update contains fixes for this CVE in Solaris/OpenSolaris components, per the advisory appendices. Custom...

CVE-2010-3578

CVE-2010-3578 concerns Oracle OpenSolaris Depot Server. The connected materials place this Vulnerability as a high-severity, remote-exploit risk affecting Oracle OpenSolaris Depot Server via network access, with CVSS v2 base score 9.0 (Attack Vector: Network; Access Complexity: Low; Authenticatio...

CVE-2010-3577

CVE-2010-3577 affects OpenSolaris OpenSolaris: Kernel/CIFS (SMB) — remote exploit over the network may affect confidentiality and integrity. CVSSv2 base 6.4 (network, low access complexity). Oracle CPU October 2010 provides patches; apply the CPU fix/upgrade to a patched OpenSolaris release per O...