Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Filtered by product Solaris
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0502 3 Hp, Redhat, Sun 4 Hp-ux, Linux, Solaris and 1 more 2018-10-30 7.5 HIGH N/A
A Unix account has a default, null, blank, or missing password.
CVE-1999-0513 7 Digital, Freebsd, Hp and 4 more 8 Unix, Freebsd, Hp-ux and 5 more 2018-10-30 5.0 MEDIUM N/A
ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVE-1999-0188 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
The passwd command in Solaris can be subjected to a denial of service.
CVE-1999-0024 6 Bsdi, Ibm, Isc and 3 more 12 Bsd Os, Aix, Bind and 9 more 2018-10-30 5.0 MEDIUM N/A
DNS cache poisoning via BIND, by predictable query IDs.
CVE-2002-0677 7 Caldera, Compaq, Hp and 4 more 9 Openunix, Unixware, Tru64 and 6 more 2018-10-30 7.5 HIGH N/A
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
CVE-2002-0678 7 Caldera, Compaq, Hp and 4 more 9 Openunix, Unixware, Tru64 and 6 more 2018-10-30 7.2 HIGH N/A
CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.
CVE-2002-0679 6 Caldera, Compaq, Hp and 3 more 8 Openunix, Unixware, Tru64 and 5 more 2018-10-30 10.0 HIGH N/A
Buffer overflow in Common Desktop Environment (CDE) ToolTalk RPC database server (rpc.ttdbserverd) allows remote attackers to execute arbitrary code via an argument to the _TT_CREATE_FILE procedure.
CVE-1999-0674 3 Netbsd, Openbsd, Sun 4 Netbsd, Openbsd, Solaris and 1 more 2018-10-30 7.2 HIGH N/A
The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve.
CVE-1999-0676 1 Sun 2 Solaris, Sunos 2018-10-30 4.6 MEDIUM N/A
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack.
CVE-1999-0687 4 Cde, Digital, Ibm and 1 more 5 Cde, Unix, Aix and 2 more 2018-10-30 7.5 HIGH N/A
The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands.
CVE-1999-0689 2 Cde, Sun 3 Cde, Solaris, Sunos 2018-10-30 7.2 HIGH N/A
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
CVE-1999-0691 4 Cde, Digital, Ibm and 1 more 5 Cde, Unix, Aix and 2 more 2018-10-30 7.2 HIGH N/A
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name.
CVE-2000-0032 1 Sun 2 Solaris, Sunos 2018-10-30 10.0 HIGH N/A
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.
CVE-2000-0118 2 Redhat, Sun 3 Linux, Solaris, Sunos 2018-10-30 7.2 HIGH N/A
The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brute force password guessing.
CVE-2001-0115 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter.
CVE-2001-0548 1 Sun 2 Solaris, Sunos 2018-10-30 4.6 MEDIUM N/A
Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable.
CVE-1999-0370 1 Sun 2 Solaris, Sunos 2018-10-30 4.6 MEDIUM N/A
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files.
CVE-1999-1413 1 Sun 2 Solaris, Sunos 2018-10-30 4.6 MEDIUM N/A
Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users to overwrite or create files at higher privileges by causing a core dump, e.g. through dmesg.
CVE-2000-0407 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option.
CVE-2000-0844 13 Caldera, Conectiva, Debian and 10 more 16 Openlinux, Openlinux Ebuilder, Openlinux Eserver and 13 more 2018-10-30 10.0 HIGH N/A
Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen.
CVE-2000-0471 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname.
CVE-2001-0353 1 Sun 2 Solaris, Sunos 2018-10-30 10.0 HIGH N/A
Buffer overflow in the line printer daemon (in.lpd) for Solaris 8 and earlier allows local and remote attackers to gain root privileges via a "transfer job" routine.
CVE-2001-0401 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.
CVE-1999-0008 2 Hp, Sun 3 Hp-ux, Solaris, Sunos 2018-10-30 10.0 HIGH N/A
Buffer overflow in NIS+, in Sun's rpc.nisd program.
CVE-1999-0051 3 Globetrotter, Sgi, Sun 5 Flexlm, Irix, License Oeo and 2 more 2018-10-30 7.2 HIGH N/A
Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
CVE-2000-0316 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option.
CVE-1999-0973 1 Sun 2 Solaris, Sunos 2018-10-30 10.0 HIGH N/A
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode.
CVE-1999-0318 4 Hp, Ibm, Redhat and 1 more 5 Hp-ux, Aix, Linux and 2 more 2018-10-30 7.2 HIGH N/A
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
CVE-1999-0952 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access.
CVE-1999-0949 3 Sgi, Sun, Turbolinux 4 Irix, Solaris, Sunos and 1 more 2018-10-30 7.2 HIGH N/A
Buffer overflow in canuum program for Canna input system allows local users to gain root privileges.
CVE-1999-0315 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in Solaris fdformat command gives root access to local users.
CVE-1999-0974 1 Sun 2 Solaris, Sunos 2018-10-30 10.0 HIGH N/A
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service.
CVE-1999-0977 1 Sun 2 Solaris, Sunos 2018-10-30 10.0 HIGH N/A
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.
CVE-1999-0320 1 Sun 2 Solaris, Sunos 2018-10-30 9.3 HIGH N/A
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
CVE-1999-1014 1 Sun 2 Solaris, Sunos 2018-10-30 4.6 MEDIUM N/A
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.
CVE-1999-0129 7 Bsdi, Eric Allman, Freebsd and 4 more 9 Bsd Os, Sendmail, Freebsd and 6 more 2018-10-30 4.6 MEDIUM N/A
Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file.
CVE-1999-0132 2 Hp, Sun 3 Hp-ux, Solaris, Sunos 2018-10-30 2.1 LOW N/A
Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access.
CVE-1999-0022 6 Bsdi, Freebsd, Hp and 3 more 7 Bsd Os, Freebsd, Hp-ux and 4 more 2018-10-30 7.2 HIGH N/A
Local user gains root privileges via buffer overflow in rdist, via expstr() function.
CVE-1999-0339 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access.
CVE-2000-0337 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter.
CVE-1999-1191 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument.
CVE-1999-0369 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access.
CVE-1999-1402 2 Freebsd, Sun 3 Freebsd, Solaris, Sunos 2018-10-30 2.1 LOW N/A
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
CVE-1999-1419 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.
CVE-1999-1423 1 Sun 2 Solaris, Sunos 2018-10-30 2.1 LOW N/A
ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g. via ping -i.
CVE-1999-1432 1 Sun 2 Solaris, Sunos 2018-10-30 7.5 HIGH N/A
Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical access to input characters to the last active application from the keyboard for a short period after the system is restoring, which could lead to increased privileges.
CVE-2002-0085 1 Sun 2 Solaris, Sunos 2018-10-30 5.0 MEDIUM N/A
cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.
CVE-1999-0165 3 Bsdi, Linux, Sun 5 Bsd Os, Linux Kernel, Nfs and 2 more 2018-10-30 10.0 HIGH N/A
NFS cache poisoning.
CVE-2000-0030 1 Sun 2 Solaris, Sunos 2018-10-30 5.0 MEDIUM N/A
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
CVE-1999-0125 3 Redhat, Sgi, Sun 4 Linux, Irix, Solaris and 1 more 2018-10-30 4.6 MEDIUM N/A
Buffer overflow in SGI IRIX mailx program.