sun Vulnerability Advisory Catalog

Total 1,172 security vulnerabilities recorded for sun software and firmware.

← Back to All Vendors
CVE-2006-4175 UNKNOWN
Component: java_system_directory_server

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to ...

📅 2007-03-26
CVSS 7.8 Dossier →
CVE-2007-1526 UNKNOWN
Component: java_system_web_server

Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation...

📅 2007-03-20
CVSS 6.0 Dossier →
CVE-2007-1488 UNKNOWN
Component: java_system_web_server

Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain unauthorized access to data", pos...

📅 2007-03-16
CVSS 7.5 Dossier →
CVE-2007-1419 UNKNOWN
Component: java_dynamic_management_kit

The Java Management Extensions Remote API Remote Method Invocation over Internet Inter-ORB Protocol (JMX RMI-IIOP) API in Java Dynamic Management Kit ...

📅 2007-03-12
CVSS 4.3 Dossier →
CVE-2007-1346 UNKNOWN
Component: sun_fire

Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server....

📅 2007-03-08
CVSS 6.6 Dossier →
CVE-2006-7140 UNKNOWN
Component: solaris

The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding befor...

📅 2007-03-07
CVSS 5.8 Dossier →
CVE-2006-7028 UNKNOWN
Component: solaris

Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a flood of s...

📅 2007-02-23
CVSS 7.8 Dossier →
CVE-2007-0914 UNKNOWN
Component: solaris

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) via unknown vectors....

📅 2007-02-14
CVSS 7.1 Dossier →
CVE-2007-0895 UNKNOWN
Component: solaris

Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to de...

📅 2007-02-13
CVSS 2.6 Dossier →
CVE-2007-0668 UNKNOWN
Component: solaris

The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which cou...

📅 2007-02-02
CVSS 6.2 Dossier →
CVE-2007-0634 UNKNOWN
Component: solaris

Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain ICMP packe...

📅 2007-01-31
CVSS 7.8 Dossier →
CVE-2007-0628 UNKNOWN
Component: java_system_access_manager

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Access Manager 6.1, 6.2, 6 2005Q1 (6.3), and 7 2005Q4 (7.0) before 20070129 all...

📅 2007-01-31
CVSS 4.3 Dossier →
CVE-2007-0503 UNKNOWN
Component: solaris

Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vector...

📅 2007-01-25
CVSS 6.9 Dossier →
CVE-2007-0482 UNKNOWN
Component: ray_server_software

cgi-bin/main in Sun Ray Server Software 2.0 and 3.0 before 20070123 allows local users to obtain the utadmin password by reading a web server's log fi...

📅 2007-01-25
CVSS 4.6 Dossier →
CVE-2007-0470 UNKNOWN
Component: solaris

Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors....

📅 2007-01-24
CVSS 7.2 Dossier →
CVE-2007-0393 UNKNOWN
Component: solaris

Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing ...

📅 2007-01-19
CVSS 4.6 Dossier →
CVE-2007-0243 UNKNOWN
Component: jdk

Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and...

📅 2007-01-17
CVSS 6.8 Dossier →
CVE-2007-0014 UNKNOWN
Component: chainkey_java_code_protection

ChainKey Java Code Protection allows attackers to decompile Java class files via a Java class loader with a modified defineClass method that saves the...

📅 2007-01-17
CVSS 4.4 Dossier →
CVE-2007-0183 UNKNOWN
Component: iplanet_web_server

Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the N...

📅 2007-01-12
CVSS 6.8 Dossier →
CVE-2007-0165 UNKNOWN
Component: solaris

Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests tha...

📅 2007-01-10
CVSS 7.8 Dossier →
CVE-2007-0114 UNKNOWN
Component: java_system_content_delivery_server

Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspec...

📅 2007-01-09
CVSS 5.0 Dossier →
CVE-2006-6745 UNKNOWN
Component: j2se

Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System De...

📅 2006-12-26
CVSS 9.3 Dossier →
CVE-2006-6737 UNKNOWN
Component: jdk

Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (...

📅 2006-12-26
CVSS 4.3 Dossier →
CVE-2006-6736 UNKNOWN
Component: jdk

Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (...

📅 2006-12-26
CVSS 4.3 Dossier →
Page 33 of 49 (1,172 Total Records)