Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Filtered by product Sunos
Total 609 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2000-0949 2 Lbl, Sun 2 Lbl Traceroute, Sunos 2024-02-28 7.2 HIGH N/A
Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option.
CVE-1999-0136 1 Sun 1 Sunos 2024-02-28 7.2 HIGH N/A
Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access.
CVE-1999-0210 1 Sun 2 Solaris, Sunos 2024-02-28 10.0 HIGH N/A
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters.
CVE-2004-1351 1 Sun 2 Solaris, Sunos 2024-02-28 10.0 HIGH N/A
Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code.
CVE-2004-1348 1 Sun 2 Solaris, Sunos 2024-02-28 5.0 MEDIUM N/A
Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash).
CVE-1999-0018 3 Ibm, Sgi, Sun 4 Aix, Irix, Solaris and 1 more 2024-02-28 10.0 HIGH N/A
Buffer overflow in statd allows root privileges.
CVE-1999-1212 1 Sun 1 Sunos 2024-02-28 7.2 HIGH N/A
Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges.
CVE-1999-0320 1 Sun 2 Solaris, Sunos 2024-02-28 9.3 HIGH N/A
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
CVE-2004-1394 1 Sun 2 Solaris, Sunos 2024-02-28 4.6 MEDIUM N/A
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.
CVE-1999-1419 1 Sun 2 Solaris, Sunos 2024-02-28 7.2 HIGH N/A
Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges.
CVE-1999-1402 2 Freebsd, Sun 3 Freebsd, Solaris, Sunos 2024-02-28 2.1 LOW N/A
The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow local users to connect to the socket and possibly disrupt or control the operations of the program using that socket.
CVE-1999-1021 1 Sun 1 Sunos 2024-02-28 7.2 HIGH N/A
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
CVE-1999-1258 1 Sun 1 Sunos 2024-02-28 5.0 MEDIUM N/A
rpc.pwdauthd in SunOS 4.1.1 and earlier does not properly prevent remote access to the daemon, which allows remote attackers to obtain sensitive system information.
CVE-2003-1062 1 Sun 2 Solaris, Sunos 2024-02-28 4.6 MEDIUM N/A
Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory.
CVE-1999-0345 4 Freebsd, Ibm, Sco and 1 more 7 Freebsd, Aix, Sng and 4 more 2024-02-28 5.0 MEDIUM N/A
Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems.
CVE-2003-1070 1 Sun 2 Solaris, Sunos 2024-02-28 5.0 MEDIUM N/A
Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).
CVE-2003-0999 1 Sun 2 Solaris, Sunos 2024-02-28 7.2 HIGH N/A
Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files.
CVE-2004-1354 1 Sun 2 Solaris, Sunos 2024-02-28 5.0 MEDIUM N/A
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.
CVE-2000-0030 1 Sun 2 Solaris, Sunos 2024-02-28 5.0 MEDIUM N/A
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database.
CVE-1999-0302 1 Sun 2 Solaris, Sunos 2024-02-28 7.5 HIGH N/A
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server.