CVSS: 7.8EPSS: 0%CPEs: 165EXPL: 0CVE-2009-3390
https://notcve.org/view.php?id=CVE-2009-3390
24 Sep 2009 — Multiple unspecified vulnerabilities in the (1) iscsiadm and (2) iscsitadm programs in Sun Solaris 10, and OpenSolaris snv_28 through snv_109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library. Múltiples vulnerabilidades sin identificar en los programas (1) iscsiadm y (2) iscsitadm en Sun Solaris 10 y OpenSolaris snv_28 a la snv_109, permite a usuarios locales obtener privilegios a través de vectores desconocidos relacionados con la b... • http://sunsolve.sun.com/search/document.do?assetkey=1-21-119090-33-1 •
CVSS: 7.8EPSS: 0%CPEs: 252EXPL: 0CVE-2009-3183
https://notcve.org/view.php?id=CVE-2009-3183
14 Sep 2009 — Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain privileges via unspecified vectors. Desbordamiento de búfer basado en memoria dinámica en w en Sun Solaris 8 hasta 10, y OpenSolaris anterior a snv_124, permite a usuarios locales obtener privilegios a través de vectores no especificados. • http://osvdb.org/58110 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 190EXPL: 0CVE-2009-3164
https://notcve.org/view.php?id=CVE-2009-3164
10 Sep 2009 — Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_122, when a Cassini GigaSwift Ethernet Adapter (aka CE) interface is used, allows remote attackers to cause a denial of service (panic) via vectors involving jumbo frames. NOTE: this issue exists because of an incomplete fix for CVE-2009-2136. Vulnerabilidad sin especificar en la pila de red IPv6 en Sun Solaris v10, y Open Solaris desde snv_01 hasta snv_82 y desde snv_111 h... • http://secunia.com/advisories/36616 •
CVSS: 5.5EPSS: 0%CPEs: 35EXPL: 0CVE-2009-3100
https://notcve.org/view.php?id=CVE-2009-3100
08 Sep 2009 — xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service (system hang) by locking the screen and then attempting to launch an Accessibility pop-up window, related to a regression in certain Solaris and OpenSolaris patches. xscreensaver (también conocido como Gnome-XScreenSaver) en Sun Solaris v9 y v10, OpenSolaris snv_109 hasta snv_122, y... • http://bugs.opensolaris.org/view_bug.do?bug_id=6839026 •
CVSS: 5.5EPSS: 0%CPEs: 41EXPL: 1CVE-2009-3101
https://notcve.org/view.php?id=CVE-2009-3101
08 Sep 2009 — xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service (CPU consumption and console hang) by locking the screen, related to a regression in certain Solaris and OpenSolaris patches. xscreensaver (también conocido como Gnome-XScreenSaver) en Sun Solaris v0, y OpenSolaris snv_109 hasta snv_122, no maneja adecuadamente Trusted Extensions, permitiendo a usuarios locales pr... • http://bugs.opensolaris.org/view_bug.do?bug_id=6839026 • CWE-399: Resource Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 102EXPL: 0CVE-2009-2952
https://notcve.org/view.php?id=CVE-2009-2952
24 Aug 2009 — Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors. Vulnerabilidad no especificada en la función pollwakeup en Sun Solaris 10, y OpenSolaris anteriores a snv_51, permiten a los usuarios locales causar una denegación de servicio (pánico) a través de vectores desconocidos. • http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-09-1 •
CVSS: 5.5EPSS: 0%CPEs: 214EXPL: 0CVE-2009-2912
https://notcve.org/view.php?id=CVE-2009-2912
20 Aug 2009 — The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local users to cause a denial of service (panic) via vectors related to vnode function calls. Las funciones (1) sendfile y (2) sendfilev en Sun Solaris 8 a10 y OpenSolaris en versiones anteriores a snv_110, permiten a atacantes remotos provocar una denegación de servicio (panic) a través de vectores relacionados con llamadas a funciones vnode. • http://secunia.com/advisories/36400 •
CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0CVE-2009-2857
https://notcve.org/view.php?id=CVE-2009-2857
19 Aug 2009 — The kernel in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_103, does not properly handle interaction between the filesystem and virtual-memory implementations, which allows local users to cause a denial of service (deadlock and system halt) via vectors involving mmap and write operations on the same file. El kernel en Sun Solaris v8, v9, y v10, y OpenSolaris anteriores a snv_103, no maneja adecuadamente la interacción entre el sistema de ficheros y las implementaciones de memoria virtual, lo que per... • http://secunia.com/advisories/36319 • CWE-667: Improper Locking •
CVSS: 4.9EPSS: 0%CPEs: 226EXPL: 0CVE-2009-2711
https://notcve.org/view.php?id=CVE-2009-2711
07 Aug 2009 — XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276. Xscreensaver en Sun Solaris v9 y v10, OpenSolaris anterior a snv_120, y X11 v6.4.1 para Solaris v8, cuando el servidor Xorg o Xnewt es utilizado, permite a atacantes físicamente próxim... • http://secunia.com/advisories/36170 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.9EPSS: 0%CPEs: 340EXPL: 0CVE-2009-2644
https://notcve.org/view.php?id=CVE-2009-2644
29 Jul 2009 — Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds." Condición de carrera en el subsistema Solaris Auditing en Solaris 9 y 10 y OpenSolaris anterior a snv_121, cuando se usan los atributos de archivo extendidos, permite a usuarios locales provocar una denegación de servicio(panic) a través de vectores relaciona... • http://secunia.com/advisories/36042 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •