Oracle Solaris Multiple Vulnerabilities

Multiple vulnerabilities have been reported in Oracle Solaris, which can be exploited by malicious and local users to cause a DoS (Denial of Service), gain escalated privileges or potentially compromise a vulnerable system.

1. An unspecified error in fingerd can be exploited to cause the system to hang or crash via specially crafted requests.
2. An unspecified error in the SSH component can be exploited to potentially compromise a vulnerable system.
3. An unspecified error in the Installer, rksh and Trusted Extensions component can be exploited to gain escalated privileges.
4. An unspecified error in the TCP/IP implementation can be exploited by authenticated users to crash the system.
5. An unspecified error in the SSH and KSSL component can be exploited to cause the service to stop responding or crash.
6. An unspecified error in the Kernel/SCTP, Kernel/sockfs, UFS, Zones and Driver/USB component can be exploited to cause a local DoS.
7. An unspecified error in the LiveUpgrade component can be exploited to manipulate certain data or cause a local DoS.