CVSS: 6.9EPSS: 0%CPEs: 210EXPL: 0CVE-2009-0319
https://notcve.org/view.php?id=CVE-2009-0319
Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_108, allows local users to cause a denial of service (autofs mount outage) or possibly gain privileges via vectors related to "xdr processing problems." Vulnerabilidad sin especificar en el módulo autofs en el kernel en Sun Solaris 8 a la 10, y OpenSolaris anterior a snv_108, permite a usuarios locales provocar una denegación de servicio (parada del montaje autofs) o posiblemente la obtención de privilegios a través de vectores relacionados con "problemas de procesado xdr (xdr processing problems)." • http://secunia.com/advisories/33665 http://sunsolve.sun.com/search/document.do?assetkey=1-21-128624-09-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-249966-1 http://support.avaya.com/elmodocs2/security/ASA-2009-041.htm http://www.securityfocus.com/bid/33459 http://www.securitytracker.com/id?1021644 http://www.vupen.com/english/advisories/2009/0256 http://www.vupen.com/english/advisories/2009/0363 https://exchange.xforce.ibmcloud.com/vulnerabilities/48234 https:/ •
CVSS: 7.8EPSS: 35%CPEs: 217EXPL: 1CVE-2009-0304 – SunOS Release 5.11 snv_101b - Remote IPv6 Crash
https://notcve.org/view.php?id=CVE-2009-0304
The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet, related to an "insufficient validation security vulnerability," as demonstrated by SunOSipv6.c. El kernel en Sun Solaris versiones 10 y 11 snv_101b, y OpenSolaris anterior a snv_108, permite a los atacantes remotos causar una denegación de servicio (bloqueo del sistema) por medio de un paquete IPv6 diseñado, relacionado con una "insufficient validation security vulnerability," como es demostrado mediante el archivo SunOSipv6.c. • https://www.exploit-db.com/exploits/7865 http://lists.grok.org.uk/pipermail/full-disclosure/2009-January/067709.html http://secunia.com/advisories/33605 http://securitytracker.com/id?1021635 http://sunsolve.sun.com/search/document.do?assetkey=1-66-251006-1 http://www.securityfocus.com/bid/33435 http://www.vupen.com/english/advisories/2009/0232 https://exchange.xforce.ibmcloud.com/vulnerabilities/48208 •
CVSS: 4.9EPSS: 0%CPEs: 210EXPL: 0CVE-2009-0268
https://notcve.org/view.php?id=CVE-2009-0268
Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic) via unspecified vectors related to lack of "properly sequenced code" in ptc and ptsl. Una condición de carrera en el pseudo-terminal (alias PTY) en el módulo controlador de Sun Solaris 8 a 10, y OpenSolaris en versiones anteriores a la snv_103, permite a usuarios locales provocar una denegación de servicio (con un panic del kernel) a través de vectores no especificados relacionados con la falta de "código correctamente secuenciado" en PTC y PTSL. • http://secunia.com/advisories/33708 http://sunsolve.sun.com/search/document.do?assetkey=1-21-113685-07-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-249586-1 http://support.avaya.com/elmodocs2/security/ASA-2009-034.htm http://www.securityfocus.com/bid/33406 http://www.securitytracker.com/id?1021640 https://exchange.xforce.ibmcloud.com/vulnerabilities/48179 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6061 • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') •
CVSS: 5.0EPSS: 2%CPEs: 192EXPL: 0CVE-2009-0267
https://notcve.org/view.php?id=CVE-2009-0267
libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash) via an unspecified IKE packet, a different vulnerability than CVE-2007-2989. libike en Sun Solaris v9 y v10, y OpenSolaris anteriores a snv_100, no chequean los paquetes de forma apropiada, lo que permite a atacantes remotos provocar una denegación de servicio (caída del demonio in.iked) a través de paquetes IKE no especificados, es una vulnerabilidad distinta a CVE-2007-2989 • http://secunia.com/advisories/33702 http://sunsolve.sun.com/search/document.do?assetkey=1-21-113451-15-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-247406-1 http://support.avaya.com/elmodocs2/security/ASA-2009-032.htm http://www.securityfocus.com/bid/33407 https://exchange.xforce.ibmcloud.com/vulnerabilities/48178 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6116 • CWE-20: Improper Input Validation •
CVSS: 4.9EPSS: 0%CPEs: 124EXPL: 0CVE-2009-0131
https://notcve.org/view.php?id=CVE-2009-0131
The UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users to cause a denial of service (panic) via the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call. La implementacion UFS en el Kernel de Sun OpenSolaris snv_29 hasta la snv_90 permite a usuarios locales producir una denegacion de servicio (produciendo un panic) a traves de la prueba unica posix_fallocate en el conjunto de pruebas SUSv3 POSIX, relacionado con una llamada F_ALLOCSP fcntl. • http://bugs.opensolaris.org/view_bug.do?bug_id=6711995 http://sunsolve.sun.com/search/document.do?assetkey=1-26-239188-1 http://www.securityfocus.com/bid/33267 http://www.securitytracker.com/id?1021600 •