Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: libelfsign). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: CPU performance counters (CPC) drivers).
Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System.
Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel). Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Network). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: iSCSI Data Mover(IDM)). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Remote Procedure Call (RPC)). Supported versions that are affected are 8, 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: KSSL). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows successful unauthenticated network attacks via SSL/TLS. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 10. Very difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: sockfs). Supported versions that are affected are 8, 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

Oracle Solaris Cluster 3.3: JCommon patch for Oracle Solaris 10_x8.
Date this patch was last updated by Sun : Mar/12/13

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Name Service Cache Daemon (NSCD)).
Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System.
Successful attack of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Solaris.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: USB hub driver). Supported versions that are affected are 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

SunOS 5.10_x86: pppd patch.
Date this patch was last updated by Sun : Jun/09/16

SunOS 5.10_x86: Foomatic patch.
Date this patch was last updated by Sun : Aug/16/12

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Install/smpatch). The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Network/NFS). Supported versions that are affected are 9, 10 and 11. Difficult to exploit vulnerability allows successful unauthenticated network attacks via NFS. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data.

SunOS 5.10_x86: qlc patch.
Date this patch was last updated by Sun : Jan/16/18

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Kernel/IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

SunOS 5.10_x86: LP Alerts Patch.
Date this patch was last updated by Sun : Aug/07/12

SunOS 5.10_x86: libglib-2.0.so.0.1800.3 pa.
Date this patch was last updated by Sun : Mar/15/13

SunOS 5.10_x86: libgsf-1.so.1.8.2 patch.
Date this patch was last updated by Sun : Dec/07/12

SunOS 5.10_x86: /usr/sfw/lib/gimp/2.0/plug.
Date this patch was last updated by Sun : Oct/05/12

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Print Filter Utility). Supported versions that are affected are 9, 10 and 11.1. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

SunOS 5.10_x86: Texinfo patch.
Date this patch was last updated by Sun : Jan/14/14

SunOS 5.10_x86: SunFreeware GNU grep.
Date this patch was last updated by Sun : May/29/13

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Utility/Remote Execution Server(in.rexecd)). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via TCP/IP. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Branded Zone). The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized write access to any arbitrary Operating System location.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: bsmconv(1M), bsmunconv(1M)). Supported versions that are affected are 8, 9 and 10. Very difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.

SunOS 5.10_x86: xntpd patch.
Date this patch was last updated by Sun : Jan/10/15

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: mailx(1)). Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Text Utilities). The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Utility). Supported versions that are affected are 8, 9, 10 and 11. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Libraries/PAM-Unix). The supported version that is affected is 10. Difficult to exploit vulnerability allows successful unauthenticated network attacks via NFSv2.
Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data.

SunOS 5.10_x86: telnet patch.
Date this patch was last updated by Sun : Feb/21/12

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: rmformat Utility). Supported versions that are affected are 10 and 11.2. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System takeover including arbitrary code execution.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: in.tnamed(1M)). Supported versions that are affected are 9 and 10. Easily exploitable vulnerability allows successful unauthenticated network attacks via NameServer. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Utility/fdformat). Supported versions that are affected are 8, 9 and 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized read access to a subset of Solaris accessible data.

SunOS 5.10_x86: Perl patch.
Date this patch was last updated by Sun : Oct/16/17

SunOS 5.10_x86: Perl patch.
Date this patch was last updated by Sun : Sep/15/16

SunOS 5.10_x86: Perl patch.
Date this patch was last updated by Sun : Nov/15/14

SunOS 5.10_x86: Perl patch.
Date this patch was last updated by Sun : Oct/14/13

SunOS 5.10_x86: /usr/ccs/bin/error patch.
Date this patch was last updated by Sun : Feb/06/13

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Utility/Umount). Supported versions that are affected are 9 and 10. Difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution.

Vulnerability in the Solaris component of Oracle Sun Products Suite (subcomponent: Filesystem/cachefs). Supported versions that are affected are 9 and 10. Difficult to exploit vulnerability requiring logon to Operating System plus additional login/authentication to component or subcomponent. Successful attack of this vulnerability can escalate attacker privileges resulting in unauthorized Operating System takeover including arbitrary code execution.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 10. Easily exploitable vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized Operating System hang or frequently repeatable crash (complete DOS).

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: Filesystem/NFS). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via IPv6. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data as well as read access to a subset of Solaris accessible data. Note: CVE-2013-0405 occurs only when the Solaris NFS client mounts the NFS server over IPv6.

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: DHCP Server). Supported versions that are affected are 10 and 11.2. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Solaris.

Vulnerability in the Solaris component of Oracle and Sun Systems Products Suite (subcomponent: SMF/File Locking Services). Supported versions that are affected are 8, 9, 10 and 11. Easily exploitable vulnerability allows successful unauthenticated network attacks via NFS. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some Solaris accessible data and ability to cause a partial denial of service (partial DOS) of Solaris.

ID	Name	Severity
108193	Solaris 10 (x86) : 150401-23	medium
108192	Solaris 10 (x86) : 150401-20	medium
108191	Solaris 10 (x86) : 150401-13	medium
108190	Solaris 10 (x86) : 150401-11	medium
108189	Solaris 10 (x86) : 150401-10	medium
108188	Solaris 10 (x86) : 150313-06	high
108187	Solaris 10 (x86) : 150158-01	medium
108186	Solaris 10 (x86) : 150124-01	medium
108185	Solaris 10 (x86) : 150120-03	medium
108184	Solaris 10 (x86) : 150118-01	low
108183	Solaris 10 (x86) : 150114-02	medium
108182	Solaris 10 (x86) : 150101-01	medium
108181	Solaris 10 (x86) : 149647-02	low
108180	Solaris 10 (x86) : 149639-02	medium
108179	Solaris 10 (x86) : 149497-02	high
108178	Solaris 10 (x86) : 149484-01	high
108177	Solaris 10 (x86) : 149454-02	low
108176	Solaris 10 (x86) : 149192-01	medium
108175	Solaris 10 (x86) : 149176-13	high
108174	Solaris 10 (x86) : 149166-01	medium
108173	Solaris 10 (x86) : 149164-01	medium
108172	Solaris 10 (x86) : 149150-01	high
108171	Solaris 10 (x86) : 149113-01	high
108170	Solaris 10 (x86) : 149109-01	high
108169	Solaris 10 (x86) : 149107-01	medium
108168	Solaris 10 (x86) : 149076-01	medium
108167	Solaris 10 (x86) : 149072-01	high
108166	Solaris 10 (x86) : 149068-01	high
108165	Solaris 10 (x86) : 148976-01	medium
108164	Solaris 10 (x86) : 148955-01	medium
108163	Solaris 10 (x86) : 148949-01	medium
108162	Solaris 10 (x86) : 148882-02	high
108161	Solaris 10 (x86) : 148871-01	medium
108160	Solaris 10 (x86) : 148769-02	low
108159	Solaris 10 (x86) : 148769-01	low
108158	Solaris 10 (x86) : 148694-01	medium
108157	Solaris 10 (x86) : 148658-01	high
108156	Solaris 10 (x86) : 148628-02	high
108155	Solaris 10 (x86) : 148626-01	medium
108154	Solaris 10 (x86) : 148566-01	low
108153	Solaris 10 (x86) : 148562-12	high
108152	Solaris 10 (x86) : 148562-11	high
108151	Solaris 10 (x86) : 148562-08	high
108150	Solaris 10 (x86) : 148562-06	high
108149	Solaris 10 (x86) : 148424-01	high
108148	Solaris 10 (x86) : 148408-01	medium
108147	Solaris 10 (x86) : 148404-01	medium
108146	Solaris 10 (x86) : 148384-01	medium
108145	Solaris 10 (x86) : 148310-06	low
108144	Solaris 10 (x86) : 148242-02	medium

Detections

Analytics

Solaris Local Security Checks Family for Nessus

medium

medium

medium

medium

medium

high

medium

medium

medium

low

medium

medium

low

medium

high

high

low

medium

high

medium

medium

high

high

high

medium

medium

high

high

medium

medium

medium

high

medium

low

low

medium

high

high

medium

low

high

high

high

high

high

medium

medium

medium

low

medium