Page 5 of 52 results (0.025 seconds)

CVSS: 7.1EPSS: 0%CPEs: 210EXPL: 0

19 Dec 2008 — The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5. La funcionalidad de renovación de credenciales de Kerberos en Sun Solaris versiones 8, 9 y 10, y OpenSolaris build snv_01 hasta snv_104, permite a usuarios locales causar una denegació... • http://secunia.com/advisories/33042 • CWE-255: Credentials Management Errors •

CVSS: 7.5EPSS: 0%CPEs: 182EXPL: 0

18 Nov 2008 — ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named. ipnat en IP Filter de Sun Solaris v10 y OpenSolaris anteriores a snv_96, cuando se ejecutan en servidor DNS con traducción de direcci... • http://secunia.com/advisories/32625 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 10.0EPSS: 5%CPEs: 210EXPL: 1

10 Nov 2008 — in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805. in.dhcpd para la implementación DHCP de Sun Solaris v8 hasta v10 y OpenSolaris anterior a snv_103; permite a atacantes remotos provocar una denegación de servicio (fallo de aserción y salida del demonio) a través de solicitudes DHCP desconocidas... • https://www.exploit-db.com/exploits/4601 •

CVSS: 5.5EPSS: 0%CPEs: 177EXPL: 0

22 Sep 2008 — Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation. Vulnerabilidad sin especificar en el módulo UFS en Sun Solaris v8 a la v10 y OpenSolaris, permite a usuarios locales provocar una denegación de servicio (puntero a referencia NULL y kernel panic) a través de vectores desconocidos relacionados con ... • http://secunia.com/advisories/31919 • CWE-399: Resource Management Errors •

CVSS: 7.2EPSS: 0%CPEs: 19EXPL: 0

02 Sep 2008 — The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions multi-level security policy, and establish a covert communication channel, via unspecified vectors involving system calls. El núcleo de Sun Solaris 8 hasta 10 y OpenSolaris anterior a snv_90, permite a usuarios locales evitar chroot, zones y la política de seguridad multi nivel de Solaris Trusted Extensions, y establecer un canal de comunicación encubierto, a tr... • http://secunia.com/advisories/31667 • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 5.5EPSS: 0%CPEs: 91EXPL: 0

27 Aug 2008 — Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service (panic) via unspecified vectors. Vulnerabilidad no especificada en el módulo NFS del kernel de Sun Solaris 10 y OpenSolaris de snv_59 a snv_87, cuando está configurado como servidor NFS si la opción nodevices, permite a usuarios locales provocar una denegación de servicio (pánico) medi... • http://secunia.com/advisories/31598 •

CVSS: 8.1EPSS: 0%CPEs: 265EXPL: 0

27 Aug 2008 — Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolaris before snv_88 allows local administrators of non-global zones to read and modify NFS traffic for arbitrary non-global zones, possibly leading to file modifications or a denial of service. Vulnerabilidad no especificada en el NFS Remote Procedure Calls (RPC) implementación de zonas de Sun Solaris 10 y OpenSolaris anterior a snv_88, permite a administradores locales de zonas no-globales lee... • http://secunia.com/advisories/31622 • CWE-20: Improper Input Validation •

CVSS: 7.1EPSS: 0%CPEs: 288EXPL: 0

13 Aug 2008 — Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic) via vectors involving creation of a crafted file and use of the sendfilev system call, as demonstrated by a file served by an Apache 2.2.x web server with EnableSendFile configured; and (2) local users to cause a denial of service (panic) via a call to the sendfile system call, as reachable through the sendfilev library. La vulnerabilidad no especificada en Su... • http://osvdb.org/47375 •

CVSS: 9.8EPSS: 13%CPEs: 23EXPL: 0

08 Aug 2008 — Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via format string specifiers in an SMB packet. Múltiples vulnerabilidades de cadena de formato en snoop sobre Sun Solaris versión 8 hasta 10 y OpenSolaris anterior a la versión snv_96, cuando se omite la opción -o, permiten a los atacantes remotos ejecutar código arbitrario por medio de especificadores de cadena de formato ... • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=735 • CWE-134: Use of Externally-Controlled Format String •

CVSS: 9.8EPSS: 21%CPEs: 23EXPL: 1

08 Aug 2008 — Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute arbitrary code via a crafted SMB packet. Múltiples desbordamientos de búfer en la región stack de la memoria en Snoop en Sun Solaris versión 8 hasta 10 y OpenSolaris anterior a la versión snv_96, cuando se omite la opción -o, permiten a los atacantes remotos ejecutar código arbitrario por medio de un paquete SMB creado. • https://www.exploit-db.com/exploits/6328 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •