Total vulnerabilities in the database
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.
| Software | From | Fixed in |
|---|---|---|
| sun / sunos | 5.8 | 5.8.x |
| sun / solaris | 9.0 | 9.0.x |
| sun / solaris | 9.0-x86_update_2 | 9.0-x86_update_2.x |
| sun / solaris | 8.0 | 8.0.x |