CVSS: 4.9EPSS: 0%CPEs: 227EXPL: 1CVE-2009-1478 – Solaris 10 / OpenSolaris - 'dtrace' Local Kernel Denial of Service (PoC)
https://notcve.org/view.php?id=CVE-2009-1478
Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a denial of service (panic) via unknown vectors. Múltiples vulnerabilidades no especificadas en los manipuladores DTrace ioctl en Sun Solaris v10 y OpenSolaris anteriores a snv_114, permiten a usuarios locales provocar una denegación de servicio (panic) a través de vectores desconocidos. • https://www.exploit-db.com/exploits/8597 http://osvdb.org/54138 http://secunia.com/advisories/34836 http://secunia.com/advisories/35098 http://sunsolve.sun.com/search/document.do?assetkey=1-66-257708-1 http://support.avaya.com/elmodocs2/security/ASA-2009-171.htm http://www.securityfocus.com/bid/34753 http://www.securitytracker.com/id?1022143 http://www.vupen.com/english/advisories/2009/1199 http://www.vupen.com/english/advisories/2009/1378 https://exchange.xforce.ibm •
CVSS: 2.1EPSS: 0%CPEs: 226EXPL: 0CVE-2009-1276
https://notcve.org/view.php?id=CVE-2009-1276
XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, as demonstrated by Thunderbird new-mail notifications. XScreenSaver en Sun Solaris v10 and OpenSolaris anteriores a snv_109, y Solaris v8 y v9 con GNOME v2.0 o v2.0.2, permite a atacantes próximos físicamente conseguir información sensible, leyendo las ventanas "PopUp"s, que se muestran cuando la pantalla se bloquea, como se demostró en las notificaciones de nuevo mensaje de Thunderbird. • http://securitytracker.com/id?1022009 http://sunsolve.sun.com/search/document.do?assetkey=1-21-120094-22-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-255308-1 http://www.securityfocus.com/bid/34421 http://www.vupen.com/english/advisories/2009/0978 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.4EPSS: 0%CPEs: 227EXPL: 0CVE-2009-1207
https://notcve.org/view.php?id=CVE-2009-1207
Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a symlink attack on temporary files. Condición Race en la secuencia de comandos en Sun Solaris v8 hasta v10, y OpenSolaris snv_01 hasta snv_111, permite a los usuario locales sobrescribir arbitrariamente archivos, probablemente involucra un ataque de enlace simbólico en archivos temporales. • http://secunia.com/advisories/34558 http://secunia.com/advisories/34813 http://sunsolve.sun.com/search/document.do?assetkey=1-21-138897-01-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-253468-1 http://support.avaya.com/elmodocs2/security/ASA-2009-140.htm http://www.securityfocus.com/bid/34316 http://www.vupen.com/english/advisories/2009/1105 https://exchange.xforce.ibmcloud.com/vulnerabilities/49526 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mit • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 7.8EPSS: 6%CPEs: 221EXPL: 0CVE-2009-0923
https://notcve.org/view.php?id=CVE-2009-0923
Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers to cause a denial of service (loss of incremental propagation requests to slave KDC servers) via unknown vectors related to the master Key Distribution Center (KDC) server. Vulnerabilidad sin especificar en Kerberos Incremental Propagation en Solaris 10 y OpenSolaris snv_01 hasta snv_110 permite a atacantes remotos provocar una denegación de servicio (perdida de peticiones de propagación incremental a servidores KDC esclavos) a través de vectores desconocidos relacionados con el servidor maestro Key Distribution Center (KDC) • http://secunia.com/advisories/34298 http://secunia.com/advisories/34487 http://sunsolve.sun.com/search/document.do?assetkey=1-26-249926-1 http://support.avaya.com/elmodocs2/security/ASA-2009-102.htm http://www.securityfocus.com/bid/34139 http://www.securitytracker.com/id?1021851 http://www.vupen.com/english/advisories/2009/0741 http://www.vupen.com/english/advisories/2009/0875 https://exchange.xforce.ibmcloud.com/vulnerabilities/49276 https://oval.cisecurity.org/repository/search •
CVSS: 4.7EPSS: 0%CPEs: 52EXPL: 0CVE-2009-0924
https://notcve.org/view.php?id=CVE-2009-0924
Unspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode on x86 architectures, allows local users to cause a denial of service (hang of UFS filesystem write) via unknown vectors related to the (1) ufs_getpage and (2) ufs_putapage routines, aka CR 6442712. Vulnerabilidad no especificada en Sun OpenSolaris snv_39 hasta snv_45, cuando se ejecuta en modo 64-bit sobre arquitecturas x86, permite a usuarios locales provocar una denegación de servicio (cuelgue en la escritura en el sistema de archivos UFS) a través de vectores desconocidos relacionados con las rutinas (1) ufs_getpage y (2) ufs_putapage, también conocido como CR 6442712. • http://secunia.com/advisories/34331 http://sunsolve.sun.com/search/document.do?assetkey=1-66-254628-1 http://support.avaya.com/elmodocs2/security/ASA-2009-103.htm http://www.securityfocus.com/bid/34137 http://www.securitytracker.com/id?1021850 http://www.vupen.com/english/advisories/2009/0742 http://www.vupen.com/english/advisories/2009/0876 https://exchange.xforce.ibmcloud.com/vulnerabilities/49281 • CWE-399: Resource Management Errors •