CVE-2012-0094
https://notcve.org/view.php?id=CVE-2012-0094
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability, related to TCP/IP. Vulnerabilidad no especificada en Oracle Solaris v9, v10, v11 y Express permite a atacantes remotos afectar a la disponibilidad de los servicios. La vulnerabilidad esta relacionada con la pila TCP/IP. • http://osvdb.org/78420 http://secunia.com/advisories/48308 http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html https://exchange.xforce.ibmcloud.com/vulnerabilities/72495 •
CVE-2011-3337
https://notcve.org/view.php?id=CVE-2011-3337
eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/. eEye Audit ID 2499 en eEye Digital Security Audits 2406 hasta 2423 para eEye Retina Network Security Scanner en HP-UX, IRIX, y Solaris, permite a usuarios locales ganar privilegios a través de un caballo de troya en un directorio de su elección bajo /usr/local/. • http://www.eeye.com/Resources/Security-Center/Research/Security-Advisories/AL20111108 http://www.kb.cert.org/vuls/id/448051 • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2011-4834 – HP Application Lifestyle Management 11 - 'GetInstalledPackages' Local Privilege Escalation
https://notcve.org/view.php?id=CVE-2011-4834
The GetInstalledPackages function in the configuration tool in HP Application Lifestyle Management (ALM) 11 on AIX, HP-UX, and Solaris allows local users to gain privileges via (1) a Trojan horse /tmp/tmp.txt FIFO or (2) a symlink attack on /tmp/tmp.txt. La función GetInstalledPackages en la herramienta de configuración en HP Application Lifestyle Management (ALM) 11 en AIX, HP-UX, y Solaris permite a usuarios locales ganar privilegios a través de (1) un caballo de troya /tmp/tmp.txt FIFO o (2) un ataque symlink a /tmp/tmp.txt. • https://www.exploit-db.com/exploits/36430 http://0a29.blogspot.com/2011/12/0a29-11-2-privilege-escalation.html http://secunia.com/advisories/47040 http://www.securityfocus.com/archive/1/520783/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/71698 • CWE-264: Permissions, Privileges, and Access Controls •
CVE-2011-4160
https://notcve.org/view.php?id=CVE-2011-4160
Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors. Vulnerabilidad no especificada en HP Operations Agent v11.00 y Performance Agent v4.73 y v5.0 en AIX, HP-UX, Linux, y Solaris, permite a usuarios locales evitar las restricciones de acceso del directorio a través de vectores desconocidos • http://marc.info/?l=bugtraq&m=132198248000785&w=2 http://secunia.com/advisories/46971 http://www.securityfocus.com/bid/50761 •
CVE-2011-2313
https://notcve.org/view.php?id=CVE-2011-2313
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to ZFS, a different vulnerability than CVE-2011-2311. Vulnerabilidad no especificada en Oracle Solaris 10 permite a usuarios locales afectar la disponibilidad, relacionados con ZFS, una vulnerabilidad diferente a CVE-2011-2311. • http://www.oracle.com/technetwork/topics/security/cpuoct2011-330135.html •