CVE-2010-2382 – Oracle Solaris 8/9/10 - 'flar' Insecure Temporary File Creation
https://notcve.org/view.php?id=CVE-2010-2382
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors. Vulnerabilidad no especificada en Oracle Solaris v8, v9 y v10 permite a usuarios locales afectar la confidencialidad e integridad a través de vectores desconocidos. Solaris nfslogd suffers from an unsafe use of temporary files vulnerability. • https://www.exploit-db.com/exploits/34311 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVE-2010-2384 – Oracle Solaris Management Console - WBEM Insecure Temporary File Creation
https://notcve.org/view.php?id=CVE-2010-2384
Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console. Vulnerabilida dno especificada en Oracle Solaris v9 y v10 permite a usuarios locales afectar la confidencialidad e integridad a través de vectores desconocidos rlacionados con Solaris Management Console. Solaris wbem suffers from an unsafe use of temporary files vulnerability. • https://www.exploit-db.com/exploits/34314 http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVE-2009-4777
https://notcve.org/view.php?id=CVE-2009-4777
Unspecified vulnerability in multiple versions of Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, and JP1/Cm2/SNMP System Observer, allows remote attackers to cause a denial of service ("abnormal" termination) via vectors related to the display of an "invalid GIF file." Vulnerabilidad no especificada en múltiples versiones de Hitachi JP1/Automatic Job Management System 2 - View, JP1/Integrated Management - View, y JP1/Cm2/SNMP System Observer, permite a atacantes remotos causar una denegación de servicio (terminación anormal)a través de vectores relacionados con la visualización de un fichero GIF no válido. • http://osvdb.org/57832 http://secunia.com/advisories/36646 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-016/index.html http://www.securityfocus.com/bid/36311 http://www.vupen.com/english/advisories/2009/2576 https://exchange.xforce.ibmcloud.com/vulnerabilities/53115 •
CVE-2009-4774
https://notcve.org/view.php?id=CVE-2009-4774
Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv_49 through snv_117, when 64bit mode is used on the Intel x86 platform and a Linux (lx) branded zone is configured, allows local users to cause a denial of service (panic) via unspecified vectors, a different vulnerability than CVE-2007-6225. Vulnerabilidad sin especificar en Sun Solaris 10 y OpenSolaris snv_49 a la snv_117, cuando se usa el modo 64bit en las plataformas Intel x86 y la "branded Zone" está configurada, permite a usuarios locales provocar una denegación de servicio (panic) a través de vectores no especificados. Vulnerabilidad distinta del CVE-2007-6225. • http://secunia.com/advisories/36691 http://sunsolve.sun.com/search/document.do?assetkey=1-26-266228-1 http://www.securityfocus.com/bid/36340 http://www.vupen.com/english/advisories/2009/2581 •
CVE-2010-0444
https://notcve.org/view.php?id=CVE-2010-0444
HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors. HP Operations Agent v8.51, v8.52, v8.53, y v8.60 en Solaris v10 utiliza una contraseña en blanco en la cuenta opc_op, lo que permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos. • http://marc.info/?l=bugtraq&m=126566258722040&w=2 http://osvdb.org/62213 http://securitytracker.com/id?1023555 http://www.securityfocus.com/bid/38150 • CWE-255: Credentials Management Errors •