[CLOSE] OSVDB ID : 56816 - Disclosed: 2009-08-05

Description:

Java System Access Manager contains a flaw that may lead to an unauthorized information disclosure.  The issue is triggered when unspecified issue occurs, which will disclose policy advice information to the wrong client resulting in a loss of confidentiality.

[CLOSE] OSVDB ID : 47348 - Disclosed: 2008-08-05

Description:

Solaris contains a flaw that may allow a local denial of service. The issue is triggered when an unspecified error occurs, and will result in loss of availability for the system.

[CLOSE] OSVDB ID : 47371 - Disclosed: 2008-08-05

Description:

Sun Netra T5220 Server firmware contains a flaw related to a local denial of service condition that may allow an attacker to panic the appliance. No further details have been provided.

[CLOSE] OSVDB ID : 44363 - Disclosed: 2008-04-09

Description:

Sun Microsystems N1 Grid Engine Qmaster daemon contains a flaw that may allow a local denial of service. The issue is triggered when an unspecified error occurs, and will result in loss of availability for the service.

[CLOSE] OSVDB ID : 28227 - Disclosed: 2006-08-24

Description:

Sun Java System Content Delivery Server contains a flaw that may allow a malicious user to read data from arbitrary file. No further details have been provided.

[CLOSE] OSVDB ID : 28109 - Disclosed: 2006-08-21

Description:

Sun Microsystems, Inc. Java Plug-in and Java Web Start contain a flaw that may allow a malicious user to bypass certain security restrictions. The issue is triggered when vulnerable versions of the Java Plugin and Java Web Start are installed, and a specially crafted applet specifies the vulnerable versions in which to run. It is possible that the flaw may allow applets or applications to run with a specified version of the JRE that does not have the latest security fixes resulting in a loss of integrity.

[CLOSE] OSVDB ID : 22045 - Disclosed: 2005-12-23

Description:

PC Netlink for Solaris SPARC 7, 8 and 9 contains a flaw that may allow a malicious local user to manipulate arbitrary files on the system. The issue is due to the '/opt/lanman/sbin/slsmgr' script creating temporary files insecurely. It is possible for a user to use a symlink style attack to manipulate arbitrary files, resulting in a loss of integrity.

[CLOSE] OSVDB ID : 13172 - Disclosed: 2005-01-25

Description:

Sun Solaris DHCP Administration Utility contains a flaw that may allow a malicious user to execute commands with root privleges. The issue is triggered when a user specifies an alternate path for the environment variable LD_LIBRARY_PATH causing the service to crash and abitrary code to be run. It is possible that the flaw may allow root access resulting in a loss of system integrity.

[CLOSE] OSVDB ID : 2123 - Disclosed: 2003-08-06

Description:

Sun ONE Application Server contains a flaw that allows a malicious user to obtain the source code to JavaServer Pages (.jsp) applications. No further details have been provided.

[CLOSE] OSVDB ID : 8733 - Disclosed: 1998-09-30

Description:

The FTP client included with Solaris contains a flaw that allows a malicious FTP server to execute arbitrary commands on the client computer. No further details have been provided.