Sun Solaris vulnerabilities

CVE-2006-5012 [MEDIUM] CVE-2006-5012: Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent security messages from being logged via unspecified vectors.

CVE-2003-1058 [LOW] CVE-2003-1058: The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, al The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.

CVE-2008-1115 [MEDIUM] CWE-78 CVE-2008-1115: Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial Unspecified vulnerability in Sun Solaris 8 directory functions allows local users to cause a denial of service (panic) via an unspecified sequence of system calls or commands.

CVE-2006-0191 [MEDIUM] CVE-2006-0191: Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null de Unspecified vulnerability in Sun Solaris 10 allows local users to cause a denial of service (null dereference) via unspecified vectors involving the use of the find command on the "/proc" filesystem. NOTE: due to the vagueness of the vendor advisory, it is not clear whether this is related to CVE-2005-3250.

CVE-2006-5396 [MEDIUM] CVE-2006-5396: The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is ena The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP loopback connection with both endpoints on the same system.

CVE-2009-2952 [MEDIUM] CVE-2009-2952: Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_5 Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors.

CVE-2008-2706 [MEDIUM] CWE-399 CVE-2008-2706: Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to c Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined events, probably related to a NULL dereference.

CVE-2007-3469 [MEDIUM] CVE-2007-3469: Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local u Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors.

CVE-2006-3782 [MEDIUM] CVE-2006-3782: Unspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86, allo Unspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86, allows local users to cause a denial of service (system hang) via unspecified vectors.

CVE-2007-5132 [MEDIUM] CWE-362 CVE-2007-5132: Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of ser Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors related to "the handling of thread contexts."

CVE-2009-0913 [MEDIUM] CVE-2009-0913: Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 t Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors related to PF_KEY socket, probably related to setting socket options.

CVE-2009-0167 [MEDIUM] CVE-2009-0167: Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."

CVE-2008-4160 [MEDIUM] CWE-399 CVE-2008-4160: Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation.

CVE-2008-0938 [MEDIUM] CVE-2008-0938: Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local u Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126.

CVE-2009-2596 [MEDIUM] CVE-2009-2596: Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to fad_aupath structure members.

CVE-2008-3839 [MEDIUM] CVE-2008-3839: Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 t Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service (panic) via unspecified vectors.

CVE-2008-2418 [MEDIUM] CWE-362 CVE-2008-2418: Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to ca Race condition in the STREAMS Administrative Driver (sad) in Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors.

CVE-2001-0686 [MEDIUM] CVE-2001-0686: Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable.

CVE-2004-2306 [MEDIUM] CVE-2004-2306: Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has be Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection.

CVE-1999-0370 [MEDIUM] CVE-1999-0370: In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary fi In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.