Searching solstice software vulnerabilities

Solaris Solstice AdminSuite (AdminSuite) 2.1 us

AdminSuite | Solstice | Solaris |

Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root access by modifying their password table entries.


Solaris Solstice AdminSuite (AdminSuite) 2.1 in

AdminSuite | Solstice | Solaris |

Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.


Solaris Solstice AdminSuite (AdminSuite) 2.1 fo

AdminSuite | Solstice | Solaris |

Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files.


Solaris Solstice AdminSuite (AdminSuite) 2.1 an

AdminSuite | Solstice | Solaris |

Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges.


Solaris Solstice AdminSuite (AdminSuite) 2.1 an

AdminSuite | Solstice | Solaris |

Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.


The default installation of sadmind on Solaris

authentication | installation | Solaris | default | sadmind | weak | uses |

The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.


EMC Legato NetWorker, Sun Solstice Backup 6.0 a

authentication | privileges | Enterprise | NetWorker | attackers | AUTH_UNIX | spoofing | username | Solstice | StorEdge | through | Legato | allows | remote | Backup | bypass | relies | which | rely | gain | user | UID | Sun | EMC |

EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID.


EMC Legato NetWorker, Solstice Backup 6.0 and 6

authentication | Enterprise | privileges | attackers | NetWorker | modifying | properly | StorEdge | Solstice | through | allows | remote | tokens | Backup | Legato | verify | which | token | gain | not | EMC |

EMC Legato NetWorker, Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 6.0 through 7.2 do not properly verify authentication tokens, which allows remote attackers to gain privileges by modifying an authentication token.


The Legato PortMapper in EMC Legato NetWorker,

Enterprise | pmap_unset | PortMapper | NetWorker | attackers | StorEdge | restrict | commands | Solstice | pmap_set | through | Backup | remote | Legato | allows | access | which | does | EMC | Sun | not |

The Legato PortMapper in EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 does not restrict access to the pmap_set and pmap_unset commands, which allows remote attackers to (1) cause a denial of service by using pmap_unset to un-register a NetWorker service, or (2) obtain sensitive information from NetWorker services by using pmap_set to register a new service.


JavaMail API, as used by Solstice Internet Mail

javaxmailinternetInternetHeaders | authenticated | MimeMessage | constructor | parameter | modifying | properly | validate | Solstice | Internet | messages | JavaMail | message | remote | allows | users' | e-mail | Server | number | users | other | which | msgno | POP3 | Mail | does | read | used | not | API |

JavaMail API, as used by Solstice Internet Mail Server POP3 2.0, does not properly validate the message number in the MimeMessage constructor in javax.mail.internet.InternetHeaders, which allows remote authenticated users to read other users' e-mail messages by modifying the msgno parameter.


Multiple heap-based buffer overflows in EMC Leg

heap-based | overflows | NetWorker | Multiple | Legato | buffer | before | 71x | EMC |

Multiple heap-based buffer overflows in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allow remote attackers to execute arbitrary code or cause a denial of service (unresponsive application) via malformed RPC packets to (1) RPC program number 390109 (nsrd.exe) and (2) RPC program number 390113 (nsrexecd.exe).


nsrd.exe in EMC Legato NetWorker 7.1.x before 7

NetWorker | nsrdexe | before | Legato | EMC | 71x |

nsrd.exe in EMC Legato NetWorker 7.1.x before 7.1.4 and 7.2.x before 7.2.1.Build.314, and other products such as Sun Solstice Backup (SBU) 6.0 and 6.1 and StorEdge Enterprise Backup Software (EBS) 7.1 through 7.2L, allows remote attackers to cause a denial of service (nsrd service crash) via a malformed RPC request to RPC program number 390109, which triggers a null dereference.


Software vulnerabilities results 1 to 13 of 13     
Page: 1