Page 10 of 214 results (0.006 seconds)

CVSS: 9.0EPSS: 2%CPEs: 6EXPL: 0

06 Jun 2007 — Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to execute arbitrary code via unspecified vectors, related to the WBEM server. Vulnerabilidad no especificada en en el mecanismo de autenticación de Solaris Management Console (SMC) en Sun Solaris 8 hasta 10 anterior al 05/06/2007 permite a usuarios autenticados remotamente ejecutar código de su elección a través de vectores no especifica... • http://osvdb.org/36591 •

CVSS: 7.8EPSS: 3%CPEs: 2EXPL: 0

01 Jun 2007 — The libike library in Sun Solaris 9 before 20070529 contains a logic error related to a certain pointer, which allows remote attackers to cause a denial of service (in.iked daemon crash) by sending certain UDP packets with a source port different from 500. NOTE: this issue might overlap CVE-2006-2298. La biblioteca libike de Sun Solaris 9 versiones anteriores a 20070529 contiene un error lógico referido a un puntero concreto, lo cual permite a atacantes remotos provocar una denegación de servicio (caída de ... • http://osvdb.org/36584 •

CVSS: 7.5EPSS: 2%CPEs: 6EXPL: 1

30 May 2007 — Unspecified vulnerability in the NFS client module in Sun Solaris 8 through 10 before 20070524, when operating as an NFS server, allows remote attackers to cause a denial of service (crash) via certain Access Control List (acl) packets. Vulnerabilidad no especificada en el módulo cliente NFS de Sun Solaris 8 hasta 10 anterior al 24/05/2007, cuando opera como un servidor NFS, permite a atacantes remotos provocar una denegación de servicio (caída) mediante determinados paquetes de Lista de Control de Acceso (... • http://osvdb.org/34908 •

CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0

02 May 2007 — Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to cause a denial of service (panic) via unknown vectors, possibly related to the audit_savepath function. Vulnerabilidad no especificada en Sun Solaris 9, cuando Solaris Auditing (BSM) está habilitado para la lectura, escritura, modificación de atributos o borrado de clases de auditoria de fichero, permite a usuarios locales provocar ... • http://osvdb.org/34904 •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

23 Feb 2007 — Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a flood of small TCP/IP packets. NOTE: this issue has not been replicated by third parties. In addition, the cause is unknown, although it might be related to "jabber" and generation of a large amount of interrupts within the console, or a hardware error. Sistemas de una sola CPU Sun corriendo bajo Solaris 7, 8 o 9, como el Netra, permiten a atacantes remotos provocar una... • http://www.securityfocus.com/archive/1/434449/30/4890/threaded •

CVSS: 4.7EPSS: 0%CPEs: 3EXPL: 0

13 Feb 2007 — Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which causes rm to chdir to a ".." directory that is higher than expected, possibly up to the root file system, a related issue to CVE-2002-0435. Condición de carrera en el borrado de directorios recursivo con las opciones (1) -r o (2) -R... • http://secunia.com/advisories/24082 •

CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0

25 Jan 2007 — Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vectors. Vulnerabilidad no especificada en kcms_calibrate en Sun Solaris 8 y 9 anterior al 22/11/2007 permite a usuarios locales ejecutar comandos de su elección mediante vectores desconocidos. • http://osvdb.org/31598 •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

24 Jan 2007 — Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors. Múltiples vulnerabilidades no especificadas en tip de Sun Solaris 8, 9, y 10 permite a usuarios locales obtener privilegios de cuentas uucp mediante vectores no especificados. • http://osvdb.org/31616 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

19 Jan 2007 — Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2 and then invoking a setuid program, a variant of CVE-2002-0572. Sun Solaris 9 no verfica adecuadamenet el estado de los descriptores de fichero anterior a la ejecución del setuid, lo cual permite a un usuario local obtener privilegios a través del cierre del descriptor 0,1 o 2 y por tanto invocando un programa setuid, una variante de... • http://www.securityfocus.com/archive/1/457279/100/0/threaded •

CVSS: 7.8EPSS: 9%CPEs: 2EXPL: 1

10 Jan 2007 — Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests that trigger a crash in rpcbind. Vulnerabilidad no especificada en libnsl de Sun Solaris 8 y 9 permite a atacantes remotos provocar una denegación de servicio (caída) mediante peticiones RPC manipuladas que disparan una caída en rpcbind. • https://www.exploit-db.com/exploits/29406 •