Sun Solaris vulnerabilities

CVE-2009-2952 [MEDIUM] CVE-2009-2952: Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_5 Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors.

CVE-2007-3469 [MEDIUM] CVE-2007-3469: Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local u Unspecified vulnerability in the TCP Loopback/Fusion implementation in Sun Solaris 10 allows local users to cause a denial of service (resource exhaustion and service hang) via unspecified vectors.

CVE-2006-3782 [MEDIUM] CVE-2006-3782: Unspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86, allo Unspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86, allows local users to cause a denial of service (system hang) via unspecified vectors.

CVE-2007-5132 [MEDIUM] CWE-362 CVE-2007-5132: Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of ser Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors related to "the handling of thread contexts."

CVE-2009-2644 [MEDIUM] CWE-362 CVE-2009-2644: Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_ Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds."

CVE-2009-0913 [MEDIUM] CVE-2009-0913: Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 t Unspecified vulnerability in the keysock kernel module in Solaris 10 and OpenSolaris builds snv_01 through snv_108 allows local users to cause a denial of service (system panic) via unknown vectors related to PF_KEY socket, probably related to setting socket options.

CVE-2008-4160 [MEDIUM] CWE-399 CVE-2008-4160: Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation.

CVE-2008-0938 [MEDIUM] CVE-2008-0938: Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local u Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive kernel information via unspecified vectors, a different vulnerability than CVE-2007-4126.

CVE-2008-3839 [MEDIUM] CVE-2008-3839: Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 t Unspecified vulnerability in the NFS module in the kernel in Sun Solaris 10 and OpenSolaris snv_59 through snv_87, when configured as an NFS server without the nodevices option, allows local users to cause a denial of service (panic) via unspecified vectors.

CVE-2007-6216 [MEDIUM] CWE-362 CVE-2007-6216: Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Sola Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs.

CVE-2001-0686 [MEDIUM] CVE-2001-0686: Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable.

CVE-2008-1780 [MEDIUM] CWE-264 CVE-2008-1780: Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions a Unspecified vulnerability in the labeled networking functionality in Solaris 10 Trusted Extensions allows applications in separate labeling zones to bypass labeling restrictions via unknown vectors.

CVE-2004-2306 [MEDIUM] CVE-2004-2306: Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has be Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection.

CVE-1999-0370 [MEDIUM] CVE-1999-0370: In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary fi In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.

CVE-1999-0132 [LOW] CVE-1999-0132: Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root acce Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.

CVE-2009-3100 [MEDIUM] CVE-2009-3100: xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service (system hang) by locking the screen and then attempting to launch an Accessibility pop-up window, related to a regression in certain

CVE-2003-1058 [LOW] CVE-2003-1058: The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, al The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.

CVE-2006-4439 [LOW] CVE-2006-4439: pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode field, which allows local users to modify arbitrary files or directories, a different vulnerability than CVE-2002-1871.

CVE-2007-4732 [MEDIUM] CWE-20 CVE-2007-4732: Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Sol Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to cause a denial of service (system panic), related to passing a NULL pointer to the pgsignal function.

CVE-2007-3458 [MEDIUM] CVE-2007-3458: The libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service (Na The libsldap library in Sun Solaris 8, 9, and 10 allows local users to cause a denial of service (Name Service Caching Daemon (nscd) crash) via unspecified vectors.