Oracle Solaris, Sun Solaris

ソフト名：Oracle Solaris 11 Express, Sun Solaris 10.x (Apache 2.2.19)

回避策：あり

脆弱性：DoS攻撃, 不正HTTPのリクエスト, メモリの浪費

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://www.oracle.com/us/sun/index.htm

http://blogs.oracle.com/sunsecurity/entry/cve_2011_3192_denial_of

http://secunia.com/advisories/45606/

http://secunia.com/advisories/46137/

http://dvw-j.blogspot.com/2011/08/apache.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3192

CVE：CVE-2011-3192

危険性：Medium Risk

Oracle Solaris

ソフト名：Oracle Solaris 11 Express (Pango 1.28.3)

回避策：bug fix 7032373にて対応

脆弱性：DoS攻撃, システムアクセス, バッファオーバーフロー, バウンダリエラー, バッファオーバーフロー, 不正フォントファイル

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://blogs.oracle.com/sunsecurity/entry/cve_2011_0020_buffer_overflow

http://secunia.com/advisories/42934/

http://secunia.com/advisories/46076/

http://dvw-j.blogspot.com/2011/01/pango.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0020

CVE：CVE-2011-0020

危険性：Medium Risk

Oracle Solaris

ソフト名：Oracle Solaris 11 Express (w3m 0.5.3)

回避策：bug fix 7008664にて対応

脆弱性：スプーフィング

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://blogs.oracle.com/sunsecurity/entry/cve_2010_2074_improper_input

http://secunia.com/advisories/40134/

http://secunia.com/advisories/46077/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2074

CVE：CVE-2010-2074

危険性：Medium Risk

Oracle Solaris, Sun Solaris

ソフト名：Oracle Solaris 11 Express, Sun Solaris 10.x (Mozilla Thunderbird 3.1.10未満)

回避策：あり

脆弱性：機密情報の奪取, 権限の昇格, システムアクセス, メモリ破壊, リモートコード実行, 解放後使用エラー, 閲覧履歴の奪取, ディレクトリトラバーサル

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://www.oracle.com/us/sun/index.htm

http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird

http://secunia.com/advisories/44407/

http://secunia.com/advisories/46035/

http://dvw-j.blogspot.com/2011/05/mozilla-firefox-mozilla-seamonkey.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0069

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0070

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0072

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0074

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0077

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0078

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0080

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0081

CVE：CVE-2011-0069, CVE-2011-0070, CVE-2011-0072, CVE-2011-0074, CVE-2011-0077, CVE-2011-0078, CVE-2011-0080, CVE-2011-0081

危険性：High Risk

Sun Solaris, Oracle Solaris 11 Express

ソフト名：Sun Solaris 9/10, Oracle Solaris 11 Express (Debian GNU/Linux 5.0)

回避策：あり

脆弱性：セキュリティ制限の回避, リダイレクト脆弱性, ファイル操作

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://www.oracle.com/us/sun/index.htm

http://blogs.oracle.com/sunsecurity/entry/cve_2010_2252_improper_input

http://secunia.com/advisories/40861/

http://secunia.com/advisories/45618/

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2252

CVE：CVE-2010-2252

危険性：Low Risk

Sun Solaris, Oracle Solaris 11 Express

ソフト名：Sun Solaris 10, Oracle Solaris 11 Express (Mozilla Firefox 3.5.17未満/3.6.14未満)

回避策：あり

脆弱性：DoS攻撃, システムアクセス, XSS, スプーフィング攻撃, CSRF, メモリ破壊, リモートコード実行, 権限の昇格, 解放後使用エラー, バッファオーバーフロー

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://www.oracle.com/us/sun/index.htm

http://secunia.com/advisories/43550/

http://secunia.com/advisories/45616/

http://dvw-j.blogspot.com/2011/03/mozilla-firefox-mozilla-seamonkey.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0053

CVE：CVE-2011-0053

危険性：High Risk

Sun Solaris, Oracle Solaris 11 Express

ソフト名：Sun Solaris 10, Oracle Solaris 11 Express (Adobe Flash Player 10.2.x)

回避策：あり

脆弱性：システムアクセス, 未特定のエラー, リモートコード実行, 不正Word文書

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://www.oracle.com/us/sun/index.htm

http://blogs.oracle.com/sunsecurity/entry/cve_2011_0609_vulnerability_in

http://blogs.oracle.com/sunsecurity/entry/cve_2011_0611_vulnerability_in

http://secunia.com/advisories/43751/

http://secunia.com/advisories/44119/

http://secunia.com/advisories/45607/

http://dvw-j.blogspot.com/2011/03/adobe-flash-player-adobe-acrobat-adobe.html

http://dvw-j.blogspot.com/2011/04/adobe-flash-player-adobe-acrobat-adobe.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0609

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0611

CVE：CVE-2011-0609, CVE-2011-0611

危険性：High Risk

Oracle Solaris 11 Express

ソフト名：Oracle Solaris 11 Express (Pango 1.28.3)

回避策：あり

脆弱性：DoS攻撃, システムアクセス, メモリリアロケーションエラー

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://blogs.oracle.com/sunsecurity/entry/cve_2011_0064_vulnerability_in

http://secunia.com/advisories/43578/

http://secunia.com/advisories/45627/

http://dvw-j.blogspot.com/2011/03/pango-red-hat-enterprise-linux.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0064

CVE：CVE-2011-0064

危険性：Medium Risk

Sun Solaris, Oracle Solaris

ソフト名：Sun Solaris 9/10, Oracle Solaris 11 Express (Internet Software Consortium ISC BIND 9.4.x/9.6.x/9.7.x/9.8.x)

回避策：あり

脆弱性：DoS攻撃, アサーションエラー

ソース：

http://www.oracle.com/us/sun/index.htm

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://blogs.oracle.com/sunsecurity/entry/cve_2011_1910_denial_of

http://secunia.com/advisories/44719/

http://secunia.com/advisories/45411/

http://dvw-j.blogspot.com/2011/05/internet-software-consortium-isc-bind_31.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1910

CVE：CVE-2011-1910

危険性：Medium Risk

Sun Solaris, Oracle Solaris, Red Hat Fedora

ソフト名：Sun Solaris 8/9/10, Oracle Solaris 11 Express, Red Hat Fedora 14 (Internet Software Consortium ISC BIND 9.6.x/9.7.x/9.8.x)

回避策：あり, FEDORA-2011-9127にて対応

脆弱性：DoS攻撃, アップデート要求処理エラー, プロセスの終了

ソース：

http://www.oracle.com/us/sun/index.htm

http://fedoraproject.org/

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://blogs.oracle.com/sunsecurity/entry/cve_2011_2464_remote_denial

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062846.html

http://secunia.com/advisories/45082/

http://secunia.com/advisories/45410/

http://secunia.com/advisories/45412/

http://dvw-j.blogspot.com/2011/07/internet-software-consortium-isc-bind.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2464

CVE：CVE-2011-2464

危険性：Medium Risk

Sun Solaris, Oracle Solaris

ソフト名：Sun Solaris 10, Oracle Solaris 11 Express (Adobe Flash Player 10.2.159.1 以下)

回避策：あり

脆弱性：機密情報の奪取, システムアクセス, 不特定のエラー, 整数オーバーフローエラー, リモートコード実行, メモリ破壊, バウンダリエラー

ソース：

http://www.oracle.com/us/products/servers-storage/solaris/solaris-11-express-185123.html

http://www.oracle.com/us/sun/index.htm

http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_adobe_flashplayer

http://secunia.com/advisories/44590/

http://secunia.com/advisories/45404/

http://dvw-j.blogspot.com/2011/05/adobe-flash-player-rhel-desktop.html

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0579

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0618

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0619

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0620

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0621

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0622

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0623

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0624

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0625

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0626

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0627

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0628

CVE：CVE-2011-0579, CVE-2011-0618, CVE-2011-0619, CVE-2011-0620, CVE-2011-0621, CVE-2011-0622, CVE-2011-0623, CVE-2011-0624, CVE-2011-0625, CVE-2011-0626, CVE-2011-0627, CVE-2011-0628

危険性：High Risk