Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Filtered by product Solaris
Total 545 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2003-1066 1 Sun 2 Solaris, Sunos 2023-12-10 5.0 MEDIUM N/A
Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long syslog UDP packets.
CVE-2001-1503 1 Sun 2 Solaris, Sunos 2023-12-10 2.1 LOW N/A
The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing finger 'a b c d e f g h'@host.
CVE-1999-0190 1 Sun 2 Solaris, Sunos 2023-12-10 7.2 HIGH N/A
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access.
CVE-2004-1360 1 Sun 2 Solaris, Sunos 2023-12-10 2.1 LOW N/A
Unknown vulnerability in conv_fix in Sun Solaris 7 through 9, when invoked by conv_lpd, allows local users to overwrite arbitrary files.
CVE-2004-0653 1 Sun 1 Solaris 2023-12-10 2.1 LOW N/A
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.
CVE-1999-0210 1 Sun 2 Solaris, Sunos 2023-12-10 10.0 HIGH N/A
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
CVE-2003-1057 1 Sun 2 Solaris, Sunos 2023-12-10 7.2 HIGH N/A
Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code.
CVE-2003-1058 1 Sun 2 Solaris, Sunos 2023-12-10 3.7 LOW N/A
The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.
CVE-1999-0689 2 Cde, Sun 3 Cde, Solaris, Sunos 2023-12-10 7.2 HIGH N/A
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
CVE-2003-1063 1 Sun 2 Solaris, Sunos 2023-12-10 7.5 HIGH N/A
The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.
CVE-2002-1323 5 Redhat, Safe.pm, Sco and 2 more 9 Enterprise Linux, Linux Advanced Workstation, Safe.pm and 6 more 2023-12-10 4.6 MEDIUM N/A
Safe.pm 2.0.7 and earlier, when used in Perl 5.8.0 and earlier, may allow attackers to break out of safe compartments in (1) Safe::reval or (2) Safe::rdo using a redefined @_ variable, which is not reset between successive calls.
CVE-1999-0848 2 Isc, Sun 3 Bind, Solaris, Sunos 2023-12-10 5.0 MEDIUM N/A
Denial of service in BIND named via consuming more than "fdmax" file descriptors.
CVE-2003-1059 1 Sun 2 Solaris, Sunos 2023-12-10 7.2 HIGH N/A
Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access.
CVE-1999-0795 1 Sun 2 Solaris, Sunos 2023-12-10 7.5 HIGH N/A
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches.
CVE-2003-0091 1 Sun 2 Solaris, Sunos 2023-12-10 7.2 HIGH N/A
Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege.
CVE-2003-0196 5 Compaq, Hp, Samba and 2 more 7 Tru64, Cifs-9000 Server, Hp-ux and 4 more 2023-12-10 10.0 HIGH N/A
Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different vulnerability than CVE-2003-0201.
CVE-1999-1025 1 Sun 2 Solaris, Sunos 2023-12-10 4.6 MEDIUM N/A
CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string.
CVE-2004-0496 5 Gentoo, Linux, Mandrakesoft and 2 more 13 Linux, Linux Kernel, Mandrake Linux and 10 more 2023-12-10 7.2 HIGH N/A
Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.
CVE-2002-0436 1 Sun 2 Solaris, Sunos 2023-12-10 10.0 HIGH N/A
sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
CVE-1999-1014 1 Sun 2 Solaris, Sunos 2023-12-10 4.6 MEDIUM N/A
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument.