CVSS: 7.8EPSS: 6%CPEs: 221EXPL: 0CVE-2009-0923
https://notcve.org/view.php?id=CVE-2009-0923
Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers to cause a denial of service (loss of incremental propagation requests to slave KDC servers) via unknown vectors related to the master Key Distribution Center (KDC) server. Vulnerabilidad sin especificar en Kerberos Incremental Propagation en Solaris 10 y OpenSolaris snv_01 hasta snv_110 permite a atacantes remotos provocar una denegación de servicio (perdida de peticiones de propagación incremental a servidores KDC esclavos) a través de vectores desconocidos relacionados con el servidor maestro Key Distribution Center (KDC) • http://secunia.com/advisories/34298 http://secunia.com/advisories/34487 http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1 http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm http://www.securityfocus.com/bid/34139 http://www.securitytracker.com/id?1021851 http://www.vupen.com/english/advisories/2009/0741 http://www.vupen.com/english/advisories/2009/0875 https://exchange.xforce.ibmcloud.com/vulnerabilities/49276 https://oval.cisecurity.org/repository/search •
CVSS: 6.8EPSS: 1%CPEs: 182EXPL: 2CVE-2009-0873
https://notcve.org/view.php?id=CVE-2009-0873
The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security modes, which allows remote attackers to bypass intended access restrictions and read or modify files, as demonstrated by a combination of the sec=sys and sec=krb5 security modes, related to modes that "override each other." El demonio NFS (también conocido como nfsd) en Sun Solaris 10 y OpenSolaris snv_106, cuando NFSv3 es usado, no implementa adecuadamente las combinaciones de nodos de seguridad, lo que permite a atacantes remotos evitar las restricciones de acceso intencionadas y leer o modificar archivos, como se ha demostrado a través de una combinación de los nodos de seguridad sec=sys y sec=krb5, relacionado con nodos que "sobreescriben el otro". • http://osvdb.org/52560 http://secunia.com/advisories/34225 http://secunia.com/advisories/34435 http://securitytracker.com/id?1021832 http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-250306-1 http://support.avaya.com/elmodocs2/security/ASA-2009-096.htm http://www.securityfocus.com/bid/34062 http://www.vupen.com/english/advisories/2009/0657 http://www.vupen.com/english/advisories/2009/0814 https • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 4.7EPSS: 0%CPEs: 202EXPL: 0CVE-2009-0870
https://notcve.org/view.php?id=CVE-2009-0870
The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessing an hsfs filesystem that is shared through NFSv4, related to the rfs4_op_readdir function. El modulo del servidor NFSv4 en el kernel en Sun Solaris v10, y OpenSolaris anterior a snv_111, permite a usuarios locales producir una denegación de servicio (bucle infinito y colgado de sistema) mediante el acceso a un fichero de sistema hsfs que esta compartido en NFSv4, relacionado con la función rfs4_op_readdir. • http://secunia.com/advisories/34193 http://secunia.com/advisories/34371 http://securitytracker.com/id?1021819 http://sunsolve.sun.com/search/document.do?assetkey=1-21-139462-02-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-252469-1 http://support.avaya.com/elmodocs2/security/ASA-2009-090.htm http://www.securityfocus.com/bid/34031 http://www.vupen.com/english/advisories/2009/0635 http://www.vupen.com/english/advisories/2009/0765 https://exchange.xforce.ibmcloud& • CWE-399: Resource Management Errors •
CVSS: 4.7EPSS: 0%CPEs: 94EXPL: 0CVE-2009-0167
https://notcve.org/view.php?id=CVE-2009-0167
Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability." Vulnerabilidad no especificada en lpadmin en Sun Solaris v10 y OpenSolaris snv_61 hasta snv_106, permite a usuarios locales provocar una denegación de servicio a través de vectores no especificados, relacionados con enumeración de "impresiones erróneas", también llamado "Vulnerabilidad de ficheros temporales". • http://opensolaris.org/os/bug_reports/request_sponsor http://secunia.com/advisories/33488 http://secunia.com/advisories/33705 http://sunsolve.sun.com/search/document.do?assetkey=1-21-139390-01-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-249306-1 http://support.avaya.com/elmodocs2/security/ASA-2009-026.htm http://www.securityfocus.com/bid/33269 http://www.securitytracker.com/id?1021601 http://www.vupen.com/english/advisories/2009/0155 https://oval.cisecurity •
CVSS: 4.6EPSS: 0%CPEs: 112EXPL: 0CVE-2008-5699
https://notcve.org/view.php?id=CVE-2008-5699
The name service cache daemon (nscd) in Sun Solaris 10 and OpenSolaris snv_50 through snv_104 does not properly check permissions, which allows local users to gain privileges and obtain sensitive information via unspecified vectors. El Demonio de Caché del Servicio de Nombres (ncsd) en Sun Solaris 10 y OpenSolaris snv_50 hasta snv_104 no comprueba adecuadamente los permisos, esto permite a usuarios locales obtener privilegios e información sensible a través de vectores no especificados. • http://osvdb.org/50934 http://secunia.com/advisories/33218 http://securitytracker.com/id?1021477 http://sunsolve.sun.com/search/document.do?assetkey=1-26-242006-1 http://www.securityfocus.com/bid/32921 • CWE-264: Permissions, Privileges, and Access Controls •