A security vulnerability in the Solaris 9 in.ftpd(1M) server may allow local or remote unprivileged users to access directories outside of their home directory or to log in with their $HOME directory set to "/" (slash).

This issue is also described in CAN-2004-0148 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0148

The Xorg X server (see Xorg(1)) is one of the X Window System display servers available on the Solaris x86 platform. A buffer overflow in the X Render extension may allow an unprivileged local or remote user who is a client of the Xorg X server the ability to execute arbitrary code with the privileges of the Xorg server. The Xorg X server runs with root privileges on Solaris.

This issue is described in the following documents:

• CVE-2006-1526 at: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1526
• http://lists.freedesktop.org/archives/xorg/2006-May/015136.html

A security vulnerability in Sun N1 System Manager 1.1 may allow a local unprivileged user the ability to access internal System Manager passwords.

A security vulnerability in Sun Java System Directory Server 5.2 may allow a local or remote user to gain unauthorized administrative access to the Directory Server by logging in to the Directory Server console.

It may be possible for a remote privileged user to cause the in.iked(1M) daemon to crash or cause in.iked to send invalid data to a peer system, potentially causing that system's in.iked daemon to crash, when an IKE exchange with a malformed payload is attempted.

If in.iked crashes, then IKE can not be used to exchange keying information for IPsec, thus causing a Denial of Service (DoS) to IPsec protected network traffic.

This issue is revealed by the test suite described in NISCC vulnerability #273756, which is available at http://www.uniras.gov.uk/niscc/docs/br-20051114-01013.html?lang=en