The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Sun Trusted Solaris

Solaris: several vulnerabilities of January 2014
Several vulnerabilities of Solaris were announced in January 2014...
BID-64840, BID-64843, BID-64850, BID-64853, BID-64856, BID-64859, BID-64862, BID-64866, BID-64871, BID-64876, CERTA-2014-AVI-031, cpujan2014, CVE-2003-1067, CVE-2013-2924, CVE-2013-5821, CVE-2013-5833, CVE-2013-5834, CVE-2013-5872, CVE-2013-5875, CVE-2013-5876, CVE-2013-5883, CVE-2013-5885, CVE-2014-0390, VIGILANCE-VUL-14091
ntp.org: distributed denial of service via monlist
An attacker can use monlist of ntp.org, in order to trigger a distributed denial of service...
1532, BID-64692, c04084148, CERTA-2014-AVI-034, CERTFR-2014-AVI-069, CERTFR-2014-AVI-112, CERTFR-2014-AVI-117, CERTFR-2014-AVI-244, CERTFR-2014-AVI-526, CSCtd75033, CSCum44673, CSCum52148, CSCum76937, CSCun84909, CSCur38341, CVE-2013-5211, ESX400-201404001, ESX400-201404402-SG, ESX410-201404001, ESX410-201404402-SG, ESXi400-201404001, ESXi400-201404401-SG, ESXi410-201404001, ESXi410-201404401-SG, ESXi510-201404001, ESXi510-201404101-SG, ESXi510-201404102-SG, ESXi550-201403101-SG, FreeBSD-SA-14:02.ntpd, HPSBUX02960, JSA10613, MBGSA-1401, NetBSD-SA2014-002, openSUSE-SU-2014:0949-1, openSUSE-SU-2014:1149-1, sk98758, SSA:2014-044-02, SSRT101419, VIGILANCE-VUL-14004, VMSA-2014-0002, VMSA-2014-0002.1, VMSA-2014-0002.2, VMSA-2014-0002.4, VMSA-2015-0001
Solaris: several vulnerabilities of July 2013
Several vulnerabilities of Solaris are fixed by the CPU of July 2013...
BID-61230, BID-61239, BID-61245, BID-61247, BID-61248, BID-61250, BID-61254, BID-61258, BID-61259, BID-61261, BID-61263, BID-61266, BID-61267, BID-61271, BID-61273, BID-61275, CERTA-2013-AVI-416, CERTA-2013-AVI-427, cpujuly2013, CVE-2013-0398, CVE-2013-3745, CVE-2013-3746, CVE-2013-3748, CVE-2013-3750, CVE-2013-3752, CVE-2013-3753, CVE-2013-3754, CVE-2013-3757, CVE-2013-3765, CVE-2013-3773, CVE-2013-3786, CVE-2013-3787, CVE-2013-3797, CVE-2013-3799, CVE-2013-3813, VIGILANCE-VUL-13131
Solaris: privilege escalation via 144751-01 postinstall
A local attacker can use the 144751-01 postinstall script, in order to escalate his privileges on Solaris x86...
BID-61025, VIGILANCE-VUL-13077
Solaris: several vulnerabilities of April 2013
Several vulnerabilities of Solaris are fixed by the CPU of April 2013...
BID-59157, BID-59174, BID-59186, BID-59193, BID-59197, BID-59199, BID-59204, BID-59214, BID-59221, BID-59230, BID-59233, BID-59235, BID-59236, BID-59238, BID-59241, BID-59245, CERTA-2013-AVI-252, cpuapr2013, CVE-2012-0568, CVE-2012-0570, CVE-2013-0403, CVE-2013-0404, CVE-2013-0405, CVE-2013-0406, CVE-2013-0408, CVE-2013-0411, CVE-2013-0412, CVE-2013-0413, CVE-2013-1494, CVE-2013-1496, CVE-2013-1498, CVE-2013-1499, CVE-2013-1507, CVE-2013-1530, VIGILANCE-VUL-12682
Apache httpd: Cross Site Scripting of modules
An attacker can trigger several Cross Site Scripting in the mod_info, mod_status, mod_imagemap, mod_ldap and mod_proxy_ftp modules, in order to execute JavaScript code in the context of the web site...
BID-58165, c03734195, CERTA-2013-AVI-153, CERTA-2013-AVI-387, CERTA-2013-AVI-543, CERTA-2013-AVI-590, CERTFR-2014-AVI-112, CERTFR-2014-AVI-244, CERTFR-2015-AVI-286, CVE-2012-3499, DSA-2637-1, FEDORA-2013-4541, HPSBUX02866, JSA10685, MDVSA-2013:015, MDVSA-2013:015-1, openSUSE-SU-2013:0629-1, openSUSE-SU-2013:0632-1, RHSA-2013:0815-01, RHSA-2013:1012-01, RHSA-2013:1013-01, RHSA-2013:1207-01, RHSA-2013:1208-01, RHSA-2013:1209-01, SSA:2013-062-01, SSRT101139, VIGILANCE-VUL-12457
Solaris: several vulnerabilities of January 2013
Several vulnerabilities of Solaris are fixed by the CPU of January 2013...
BID-57393, BID-57395, BID-57398, BID-57399, BID-57402, BID-57403, BID-57406, BID-57407, CERTA-2013-AVI-031, cpujan2013, CVE-2012-0569, CVE-2012-3178, CVE-2013-0399, CVE-2013-0400, CVE-2013-0407, CVE-2013-0414, CVE-2013-0415, CVE-2013-0417, VIGILANCE-VUL-12334
Solaris: several vulnerabilities of October 2012
Several vulnerabilities of Solaris are corrected by the CPU of October 2012...
BID-56012, BID-56016, BID-56023, BID-56029, BID-56034, BID-56038, BID-56048, BID-56049, BID-56052, BID-56053, BID-56060, BID-56062, BID-56064, BID-56069, BID-56074, BID-56077, CERTA-2012-AVI-586, cpuoct2012, CVE-2012-0217, CVE-2012-3165, CVE-2012-3187, CVE-2012-3189, CVE-2012-3199, CVE-2012-3203, CVE-2012-3204, CVE-2012-3205, CVE-2012-3206, CVE-2012-3207, CVE-2012-3208, CVE-2012-3209, CVE-2012-3210, CVE-2012-3211, CVE-2012-3212, CVE-2012-3215, CVE-2012-5095, VIGILANCE-VUL-12078, VU#649219
Apache httpd: Cross Site Scripting of mod_negotiation
When an attacker can upload a file in a directory with MultiViews enabled, he can generate a Cross Site Scripting via the module mod_negotiation of Apache httpd...
BID-55131, c03734195, c03820647, CERTA-2012-AVI-460, CERTFR-2015-AVI-286, CVE-2012-2687, FEDORA-2013-1661, HPSBUX02866, JSA10685, MDVSA-2012:154, MDVSA-2012:154-1, openSUSE-SU-2013:0243-1, openSUSE-SU-2013:0245-1, openSUSE-SU-2013:0248-1, openSUSE-SU-2013:0629-1, openSUSE-SU-2013:0632-1, openSUSE-SU-2014:1647-1, RHSA-2012:1591-01, RHSA-2012:1592-01, RHSA-2012:1594-01, RHSA-2013:0130-01, RHSA-2013:0512-02, SOL15901, SSRT101139, VIGILANCE-VUL-11877
libtiff: memory corruption via tiff2pdf
An attacker can invite the victim to open a malicious TIFF image with tiff2pdf, in order to create a denial of service or to execute code...
837577, BID-54601, CERTA-2012-AVI-434, CVE-2012-3401, DSA-2552-1, FEDORA-2012-10978, FEDORA-2012-11000, JSA11023, MDVSA-2012:127, MDVSA-2013:046, openSUSE-SU-2012:0955-1, RHSA-2012:1590-01, SUSE-SU-2012:0919-1, VIGILANCE-VUL-11781
Our database contains other pages. You can request a free trial to read them.