CVSS: 4.9EPSS: 0%CPEs: 226EXPL: 0CVE-2009-2711
https://notcve.org/view.php?id=CVE-2009-2711
XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276. Xscreensaver en Sun Solaris v9 y v10, OpenSolaris anterior a snv_120, y X11 v6.4.1 para Solaris v8, cuando el servidor Xorg o Xnewt es utilizado, permite a atacantes físicamente próximos obtener información sensible mediante la lectura de ventanas emergentes, que son mostrados incluso cuando la pantalla está bloqueado, una vulnerabilidad diferente que CVE-2009-1276. • http://secunia.com/advisories/36170 http://sunsolve.sun.com/search/document.do?assetkey=1-21-115298-02-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-258928-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020463.1-1 http://www.securityfocus.com/bid/35964 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5838 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.8EPSS: 0%CPEs: 170EXPL: 0CVE-2009-2652
https://notcve.org/view.php?id=CVE-2009-2652
Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allows remote attackers to cause a denial of service (panic) via vectors involving the parsing of labeled packets. Vulnerabilidad no específica en Solaris Trusted Extensions en Sun Solaris v10, y OpenSolaris snv_37 hasta snv_120, permite a atacantes remotos provocar una denegación de servicio (panic) a través de vectores que implican el analizador de paguetes etiquetados. • http://secunia.com/advisories/36040 http://securitytracker.com/id?1022628 http://sunsolve.sun.com/search/document.do?assetkey=1-66-264808-1 http://www.securityfocus.com/bid/35882 http://www.vupen.com/english/advisories/2009/2089 https://exchange.xforce.ibmcloud.com/vulnerabilities/52129 •
CVSS: 4.9EPSS: 0%CPEs: 340EXPL: 0CVE-2009-2644
https://notcve.org/view.php?id=CVE-2009-2644
Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds." Condición de carrera en el subsistema Solaris Auditing en Solaris 9 y 10 y OpenSolaris anterior a snv_121, cuando se usan los atributos de archivo extendidos, permite a usuarios locales provocar una denegación de servicio(panic) a través de vectores relacionados a "nombres de ruta para fds no válidos". • http://secunia.com/advisories/36042 http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-42-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-264429-1 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020766.1-1 http://www.securityfocus.com/bid/35835 http://www.vupen.com/english/advisories/2009/2022 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6168 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 4.7EPSS: 0%CPEs: 224EXPL: 0CVE-2009-2596
https://notcve.org/view.php?id=CVE-2009-2596
Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to fad_aupath structure members. Vulnerabilidad sin especificar en el subsistema Solaris Auditing en Sun Solaris v9 y v10 y OpenSolaris anteriores a snv_121, cuando los atributos extendidos de ficheros son utilizados, permite a usuarios locales producir una denegación de servicio (panic) a través de vectores relacionados con los miembros estructurales fad_autpath. • http://secunia.com/advisories/35980 http://sunsolve.sun.com/search/document.do?assetkey=1-21-122300-39-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-264428-1 http://www.securityfocus.com/bid/35787 •
CVSS: 7.8EPSS: 5%CPEs: 222EXPL: 0CVE-2009-2486
https://notcve.org/view.php?id=CVE-2009-2486
Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets. Vulnerabilidad no especificada en la implementación SCTP en Sun Solaris 10, y OpenSolaris anteriores a snv_120, permite a los atacantes remotos causar una denegación de servicio (pánico) a través de paquetes no especificados. • http://osvdb.org/55875 http://secunia.com/advisories/35873 http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-253608-1 http://www.securitytracker.com/id?1022574 http://www.vupen.com/english/advisories/2009/1914 https://exchange.xforce.ibmcloud.com/vulnerabilities/51740 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6349 •