Sun Microsystems

Security Vulnerability in the in.telnetd(1M) Daemon May Allow Unauthorized Remote Users to Gain Access to a Solaris Host

A Security Vulnerability in the Solaris 10 Loopback FileSystem (LOFS) May Allow Files in a Non-global Zone to be Moved or Renamed From a Read-Only Fileystem

Local privileged users inside a non-global zone may be able to move or rename files which are part of a read-only mounted loopback file system (see lofs(7FS)).

A Security Vulnerability in Solaris 10 ICMP Handling May Allow a SystemPanic and Result in Denial of Service (DoS)

A security vulnerability in the Solaris 10 ICMP handling process may allow a remote unprivileged user to panic the system, resulting in a Denial of Service (DoS) condition.

Cross-site Scripting Vulnerability in Sun Java System Access Manager

A Cross Site Scripting (CSS or XSS) vulnerability in the Sun Java System Access Server may allow an unprivileged remote user to steal cookie information, hijack sessions, or cause a loss of data privacy between a client and the server.

Security Vulnerability in the Sun Ray Server Software Admin GUI

Due to a security vulnerability in the Sun Ray Server Software, an unprivileged local user may be able to intercept the Sun Ray administrator's (utadmin) password when the administrator logs in to the Sun Ray Administration Tool.

Security Vulnerabilities in the tip(1) Command May Allow Execution of Arbitrary Code With Elevated Privileges

Security vulnerabilities in the tip(1) command may allow a local unprivileged user the ability to execute arbitrary code with the privileges of user uucp(uid 5).

Security Vulnerability in the kcms_calibrate(1) Command

A security vulnerability in the kcms_calibrate(1) command may allow local unprivileged users to execute arbitrary commands with root privileges.

Security Vulnerability in Processing GIF Images in the Java Runtime Environment May Allow an Untrusted Applet to Elevate Privileges

A buffer overflow vulnerability in processing GIF images in the Java Runtime Environment may allow an untrusted applet to elevate its privileges.

A Security Vulnerability in Solaris libnsl(3LIB) may lead to a Denial of Service (DoS) to the rpcbind(1M) Service

A security vulnerability in Solaris 8 or 9 handling of some malformed RPC requests may allow a local or remote unprivileged user to kill the rpcbind(1M) server, causing a Denial of Service (DoS) condition.

Third-party Applications Using GSS-API May Be Vulnerable to Compromise

Third-party applications which utilize GSS-API and thus link to the Generic Security Services library libgss(3LIB), may allow an unauthenticated user (local or remote depending on the application) the ability to execute arbitrary code with the privileges of the application.

[Solaris] -- Sun Java System Content Delivery Server May Allow Unauthorized Viewing of Content Details

A security vulnerability in the Sun Java System Content Delivery Server may allow local or remote unprivileged users unauthorized access to content details.

[Solaris] -- Multiple Security Vulnerabilites in Mozilla 1.7 for Solaris 8, 9, and 10

Multiple security vulnerabilities are present in Mozilla version 1.7 for Solaris 8, 9 and 10.

[Solaris] -- Security Vulnerability in the Sun Ray Utility utxconfig(1)

A security vulnerability in the Sun Ray Server 2.0 and 3.x Software (SRSS) utxconfig(1) utility may allow a local unprivileged user the ability to create or overwrite arbitrary files on the system.

[Solaris] -- Security Vulnerability With RSA Signatures Affects Solaris WAN Boot

The Solaris WAN boot software is impacted by an RSA signature forgery vulnerability

Security Vulnerability With HTTP Requests in Sun Java System Server(s)

If the Sun Java System Proxy Server is used in conjunction with the Sun Java System Application Server or the Sun Java System Web Server then it may be susceptible to "HTTP Request Smuggling" (HRS) which can allow remote unprivileged users to be able to poison web caches, hijack sessions, perform cross-site scripting (CSS or XSS) attacks or bypass web application firewall protection.