CVSS: 6.8EPSS: 4%CPEs: 181EXPL: 0CVE-2009-3839
https://notcve.org/view.php?id=CVE-2009-3839
Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_37 through snv_125, might allow remote attackers to execute arbitrary code by leveraging access to the X server. Vulnerabilidad sin especificar en la configuración de Solaris Trusted Extensions Policy en Sun Solaris 10 y Opensolaris snv_37 a la snv_125, podría permitir a atacantes remotos ejecutar código de su elección aprovechando el acceso al sevidor X. • http://secunia.com/advisories/37184 http://sunsolve.sun.com/search/document.do?assetkey=1-66-270969-1 http://www.securityfocus.com/bid/36840 http://www.vupen.com/english/advisories/2009/3070 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6480 •
CVSS: 4.9EPSS: 0%CPEs: 4EXPL: 0CVE-2009-3519
https://notcve.org/view.php?id=CVE-2009-3519
Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages. Múltiples fugas de memoria en el módulo IP en el kernel en Sun Solaris v8 hasta v10, y OpenSolaris anterior snv_109, permite a usuarios locales causar una denegación de servicio (consumo de memoria) a través de vectores relacionados con (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, y (4) mensajes M_SIG STREAMS. • http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-44-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-263388-1 http://www.securityfocus.com/bid/36562 • CWE-772: Missing Release of Resource after Effective Lifetime •
CVSS: 1.9EPSS: 0%CPEs: 214EXPL: 0CVE-2009-3432
https://notcve.org/view.php?id=CVE-2009-3432
Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv_112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers to read a locked screen via unknown vectors related to XRandR resize events. Vulnerabilidad sin especificar en xscreensaver de Sun Solaris 10, y OpenSolaris en versiones anteriores a la snv_112, cuando Xorg o Xnewt es utilizado y RandR está activado, permite a atacantes próximos fisicamente leer una pantalla bloqueada a través de vectores de ataque desconocidos relacionados con eventos de dimensionamiento XRandR. • http://osvdb.org/58278 http://secunia.com/advisories/36830 http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-26-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-249646-1 http://www.securityfocus.com/bid/36488 http://www.securitytracker.com/id?1022936 http://www.vupen.com/english/advisories/2009/2728 https://exchange.xforce.ibmcloud.com/vulnerabilities/53424 •
CVSS: 7.2EPSS: 0%CPEs: 165EXPL: 0CVE-2009-3390
https://notcve.org/view.php?id=CVE-2009-3390
Multiple unspecified vulnerabilities in the (1) iscsiadm and (2) iscsitadm programs in Sun Solaris 10, and OpenSolaris snv_28 through snv_109, allow local users with certain RBAC execution profiles to gain privileges via unknown vectors related to the libima library. Múltiples vulnerabilidades sin identificar en los programas (1) iscsiadm y (2) iscsitadm en Sun Solaris 10 y OpenSolaris snv_28 a la snv_109, permite a usuarios locales obtener privilegios a través de vectores desconocidos relacionados con la biblioteca libima. • http://sunsolve.sun.com/search/document.do?assetkey=1-21-119090-33-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-261849-1 •
CVSS: 7.2EPSS: 0%CPEs: 252EXPL: 0CVE-2009-3183
https://notcve.org/view.php?id=CVE-2009-3183
Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain privileges via unspecified vectors. Desbordamiento de búfer basado en memoria dinámica en w en Sun Solaris 8 hasta 10, y OpenSolaris anterior a snv_124, permite a usuarios locales obtener privilegios a través de vectores no especificados. • http://osvdb.org/58110 http://sunsolve.sun.com/search/document.do?assetkey=1-21-113718-04-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-266348-1 http://unsecurityresearch.blogspot.com/2009/02/advisories-published.html https://exchange.xforce.ibmcloud.com/vulnerabilities/53188 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •