CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2008-5410
https://notcve.org/view.php?id=CVE-2008-5410
10 Dec 2008 — The PK11_SESSION cache in the OpenSSL PKCS#11 engine in Sun Solaris 10 does not maintain reference counts for operations with asymmetric keys, which allows context-dependent attackers to cause a denial of service (failed cryptographic operations) via unspecified vectors, related to the (1) RSA_sign and (2) RSA_verify functions. La caché PK11_SESSION en el motor OpenSSL PKCS#11 en Sun Solaris 10 no mantiene la cuenta de referencia para operaciones con claves asimétricas, lo que permite a atacantes dependient... • http://secunia.com/advisories/33050 • CWE-310: Cryptographic Issues •
CVSS: 7.5EPSS: 0%CPEs: 182EXPL: 0CVE-2008-5133
https://notcve.org/view.php?id=CVE-2008-5133
18 Nov 2008 — ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named. ipnat en IP Filter de Sun Solaris v10 y OpenSolaris anteriores a snv_96, cuando se ejecutan en servidor DNS con traducción de direcci... • http://secunia.com/advisories/32625 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 72EXPL: 0CVE-2008-5111
https://notcve.org/view.php?id=CVE-2008-5111
17 Nov 2008 — Unspecified vulnerability in the socket function in Sun Solaris 10 and OpenSolaris snv_57 through snv_91, when InfiniBand hardware is not installed, allows local users to cause a denial of service (panic) via unknown vectors, related to the socksdpv_close function. Una vulnerabilidad sin especificar en la función socket de Sun Solaris 10 y OpenSolaris snv_57 a la snv_91, cuando Infiniband hardware no está instalado, permite a usuarios locales causar una denegación de servicio (causando un panic) a través de... • http://osvdb.org/49854 •
CVSS: 10.0EPSS: 5%CPEs: 210EXPL: 1CVE-2008-5010 – Ubuntu 6.06 - DHCPd Remote Denial of Service
https://notcve.org/view.php?id=CVE-2008-5010
10 Nov 2008 — in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805. in.dhcpd para la implementación DHCP de Sun Solaris v8 hasta v10 y OpenSolaris anterior a snv_103; permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y salida del demonio) a través de solicitudes DHCP desconocidas... • https://www.exploit-db.com/exploits/4601 •
CVSS: 7.5EPSS: 1%CPEs: 2049EXPL: 1CVE-2008-4609
https://notcve.org/view.php?id=CVE-2008-4609
20 Oct 2008 — The TCP implementation in (1) Linux, (2) platforms based on BSD Unix, (3) Microsoft Windows, (4) Cisco products, and probably other operating systems allows remote attackers to cause a denial of service (connection queue exhaustion) via multiple vectors that manipulate information in the TCP state table, as demonstrated by sockstress. La implementación del protocolo TCP en (1) Linux, (2) plataformas basadas en BSD Unix, (3) Microsoft Windows, (4) productos Cisco, y probablemente otros sistemas operativos, p... • https://github.com/mrclki/sockstress • CWE-16: Configuration •
CVSS: 10.0EPSS: 83%CPEs: 4EXPL: 5CVE-2008-4556 – Solaris 9 (UltraSPARC) - 'sadmind' Remote Code Execution
https://notcve.org/view.php?id=CVE-2008-4556
14 Oct 2008 — Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request. Desbordamiento de búfer basado en la pila, en la función adm_build_path de sadmind en Solstice AdminSuite de Sun, en Solaris 8 y 9, permite a un atacante remoto ejecutar código de su elección por medio de una petición manipulada. • https://www.exploit-db.com/exploits/6786 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 177EXPL: 0CVE-2008-4160
https://notcve.org/view.php?id=CVE-2008-4160
22 Sep 2008 — Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation. Vulnerabilidad sin especificar en el módulo UFS en Sun Solaris v8 a la v10 y OpenSolaris, permite a usuarios locales provocar una denegación de servicio (puntero a referencia NULL y kernel panic) a través de vectores desconocidos relacionados con ... • http://secunia.com/advisories/31919 • CWE-399: Resource Management Errors •
CVSS: 7.8EPSS: 0%CPEs: 6EXPL: 1CVE-2008-4131 – Sun Solaris 9/10 Text Editors - Command Execution
https://notcve.org/view.php?id=CVE-2008-4131
19 Sep 2008 — Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1) the -t option and (2) the :tag command in the (a) vi, (b) ex, (c) vedit, (d) view, and (e) edit programs. Múltiples vulnerabilidades inespecíficas en Sun Solaris 8 a 10 permite a atacantes remotos aumentar privilegios a través de vectores relacionados con el manejo de etiquetas con la opcion (1) -t y (2) el comando :tag en los programas (a) vi, (b) ex, (c) ve... • https://www.exploit-db.com/exploits/32393 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.2EPSS: 0%CPEs: 19EXPL: 0CVE-2008-3875
https://notcve.org/view.php?id=CVE-2008-3875
02 Sep 2008 — The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls. El núcleo de Sun Solaris 8 hasta 10 y OpenSolaris anterior a snv_90, permite a usuarios locales evitar chroot, zones y la política de seguridad multi nivel de Solaris Trusted Extensions, y establecer un canal de comunicación encubierto, a tr... • http://secunia.com/advisories/31667 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 5.5EPSS: 0%CPEs: 91EXPL: 0CVE-2008-3839
https://notcve.org/view.php?id=CVE-2008-3839
27 Aug 2008 — Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service (panic) via unspecified vectors. Vulnerabilidad no especificada en el módulo NFS del kernel de Sun Solaris 10 y OpenSolaris de snv_59 a snv_87, cuando está configurado como servidor NFS si la opción nodevices, permite a usuarios locales provocar una denegación de servicio (pánico) medi... • http://secunia.com/advisories/31598 •