CVE-2009-2486
https://notcve.org/view.php?id=CVE-2009-2486
Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets. Vulnerabilidad no especificada en la implementación SCTP en Sun Solaris 10, y OpenSolaris anteriores a snv_120, permite a los atacantes remotos causar una denegación de servicio (pánico) a través de paquetes no especificados. • http://osvdb.org/55875 http://secunia.com/advisories/35873 http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-253608-1 http://www.securitytracker.com/id?1022574 http://www.vupen.com/english/advisories/2009/1914 https://exchange.xforce.ibmcloud.com/vulnerabilities/51740 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6349 •
CVE-2009-2487
https://notcve.org/view.php?id=CVE-2009-2487
Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers to cause a denial of service (panic) via unspecified vectors. Vulnerabilidad de uso después de la liberación en la función frpr_icmp en ipfilter (también conocido como IP Filter) subsistema en Sun Solaris 10, y OpenSolaris snv_45 hasta snv_110, permite a los atacantes remotos causar una denegación de servicio (pánico) a través de vectores no especificados. • http://osvdb.org/55874 http://secunia.com/advisories/35881 http://sunsolve.sun.com/search/document.do?assetkey=1-21-141020-01-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-260951-1 http://www.vupen.com/english/advisories/2009/1923 https://exchange.xforce.ibmcloud.com/vulnerabilities/51739 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6361 • CWE-399: Resource Management Errors •
CVE-2009-2296
https://notcve.org/view.php?id=CVE-2009-2296
The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access shares, and read, create, and modify arbitrary files, via unspecified vectors. El módulo NFSv4 server kernel en Sun Solaris 10, y OpenSolaris anteriores a snv_119, no implemente apropiadamente nfs_portmon, lo que permite a los atacantes remotos acceso a archivos compartidos, leído, creados y modificados arbitrariamente, a través de vectores no especificados. • http://osvdb.org/55519 http://secunia.com/advisories/35672 http://secunia.com/advisories/42550 http://sunsolve.sun.com/search/document.do?assetkey=1-21-139991-03-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-262668-1 http://www.securityfocus.com/bid/35546 http://www.securitytracker.com/id?1022492 http://www.vupen.com/english/advisories/2009/1747 https://exchange.xforce.ibmcloud.com/vulnerabilities/51450 https://support.avaya.com/css/P8/documents/100058487 •
CVE-2009-2135
https://notcve.org/view.php?id=CVE-2009-2135
Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local users to cause a denial of service (panic) via unspecified vectors related to a race between the port_dissociate and close functions. Múltiples condiciones de carrera en el Solaris Event Port API en Sun Solaris v10 y OpenSolaris versiones anteriores a snv_107 permite a usuarios locales provocar una denegación de servicio (panic) mediante vectore no especificados relacionados con una carrera entre las funciones "port_dissociate" y "close". • http://osvdb.org/55231 http://osvdb.org/55232 http://secunia.com/advisories/35279 http://sunsolve.sun.com/search/document.do?assetkey=1-21-141414-01-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-260449-1 http://support.avaya.com/elmodocs2/security/ASA-2009-246.htm http://www.securityfocus.com/bid/35437 http://www.securitytracker.com/id?1022422 http://www.vupen.com/english/advisories/2009/1634 https://exchange.xforce.ibmcloud.com/vulnerabilities/51284 https: • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVE-2009-2137
https://notcve.org/view.php?id=CVE-2009-2137
Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a denial of service (memory consumption) via unspecified vectors related to a large keylen value. Fuga de memoria en el controlador del dispositivo proveedor criptográfico Ultra-SPARC T2 (también conocido como n2cp) en Sun Solaris v10, y OpenSolaris snv_54 hasta snv_112, permite a los atacantes dependientes del contexto provocar una denegación de servicio (consumo de memoria) mediante vectores no especificados relacionados con un valor grande en "keylen". • http://osvdb.org/55234 http://secunia.com/advisories/35403 http://sunsolve.sun.com/search/document.do?assetkey=1-21-140386-03-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-258828-1 • CWE-399: Resource Management Errors •