Vulnerabilities > SUN > Opensolaris > snv.01

DATE CVE VULNERABILITY TITLE RISK
2009-01-27 CVE-2009-0304 Remote Denial of Service vulnerability in SUN Opensolaris and Solaris
The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via a crafted IPv6 packet, related to an "insufficient validation security vulnerability," as demonstrated by SunOSipv6.c.
network
low complexity
sun
7.8
2009-01-26 CVE-2009-0268 Race Condition vulnerability in SUN Opensolaris and Solaris
Race condition in the pseudo-terminal (aka pty) driver module in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows local users to cause a denial of service (panic) via unspecified vectors related to lack of "properly sequenced code" in ptc and ptsl.
local
low complexity
sun CWE-362
4.9
2009-01-26 CVE-2009-0267 Improper Input Validation vulnerability in SUN Opensolaris and Solaris
libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash) via an unspecified IKE packet, a different vulnerability than CVE-2007-2989.
network
low complexity
sun CWE-20
5.0
2009-01-07 CVE-2009-0069 Resource Management Errors vulnerability in SUN Opensolaris and Solaris
Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local users to cause a denial of service (recursive mutex_enter and panic) via unspecified vectors.
local
low complexity
sun CWE-399
4.9
2008-12-19 CVE-2008-5690 Credentials Management vulnerability in SUN Opensolaris and Solaris
The Kerberos credential renewal feature in Sun Solaris 8, 9, and 10, and OpenSolaris build snv_01 through snv_104, allows local users to cause a denial of service (authentication failure) via unspecified vectors related to incorrect cache file permissions, and lack of credential storage by the store_cred function in pam_krb5.
local
low complexity
sun CWE-255
2.1
2008-12-19 CVE-2008-5689 Resource Management Errors vulnerability in SUN Opensolaris and Solaris
tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOCGTUNPARAM IOCTL request, which triggers a NULL pointer dereference.
local
low complexity
sun CWE-399
7.2
2008-12-19 CVE-2008-5684 Resource Management Errors vulnerability in SUN Opensolaris and Solaris
Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause a denial of service (application crash), as demonstrated by a port scan that triggers a segmentation violation in the Gnome session manager (aka gnome-session).
network
low complexity
sun CWE-399
5.0
2008-11-18 CVE-2008-5133 Permissions, Privileges, and Access Controls vulnerability in SUN Opensolaris and Solaris
ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, improperly changes the source port of a packet when the destination port is the DNS port, which allows remote attackers to bypass an intended CVE-2008-1447 protection mechanism and spoof the responses to DNS queries sent by named.
network
sun CWE-264
5.8
2008-11-10 CVE-2008-5010 Remote Code Execution vulnerability in SUN Opensolaris and Solaris
in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service (assertion failure and daemon exit) via unknown DHCP requests related to the "number of offers," aka Bug ID 6713805.
network
low complexity
sun
critical
10.0
2008-09-22 CVE-2008-4160 Resource Management Errors vulnerability in SUN Opensolaris and Solaris
Unspecified vulnerability in the UFS module in Sun Solaris 8 through 10 and OpenSolaris allows local users to cause a denial of service (NULL pointer dereference and kernel panic) via unknown vectors related to the Solaris Access Control List (ACL) implementation.
local
sun CWE-399
4.7