sun Vulnerability Advisory Catalog

Total 1,172 security vulnerabilities recorded for sun software and firmware.

← Back to All Vendors
CVE-2002-0033 UNKNOWN
Component: solaris

Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long dir...

📅 2002-05-29
CVSS 10.0 Dossier →
CVE-2002-0158 UNKNOWN
Component: solaris

Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument....

📅 2002-04-02
CVSS 7.2 Dossier →
CVE-2002-0090 UNKNOWN
Component: solaris

Buffer overflow in Low BandWidth X proxy (lbxproxy) in Solaris 8 allows local users to execute arbitrary code via a long display command line option....

📅 2002-03-15
CVSS 7.2 Dossier →
CVE-2002-0089 UNKNOWN
Component: solaris

Buffer overflow in admintool in Solaris 2.5 through 8 allows local users to gain root privileges via long arguments to (1) the -d command line option,...

📅 2002-03-15
CVSS 7.2 Dossier →
CVE-2002-0088 UNKNOWN
Component: solaris

Buffer overflow in admintool in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long media installation path....

📅 2002-03-15
CVSS 7.2 Dossier →
CVE-2002-0085 UNKNOWN
Component: solaris

cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request....

📅 2002-03-15
CVSS 5.0 Dossier →
CVE-2002-0084 UNKNOWN
Component: solaris

Buffer overflow in the fscache_setup function of cachefsd in Solaris 2.6, 7, and 8 allows local users to gain root privileges via a long mount argumen...

📅 2002-03-15
CVSS 7.2 Dossier →
CVE-2001-1583 UNKNOWN
Component: sunos

lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that ...

📅 2001-12-31
CVSS 10.0 Dossier →
CVE-2001-1582 UNKNOWN
Component: solaris

Buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8 allows local users to execute arbitrary code via a long LDAP_OPTIONS e...

📅 2001-12-31
CVSS 7.2 Dossier →
CVE-2001-1555 UNKNOWN
Component: solaris

pt_chmod in Solaris 8 does not call fdetach to reset terminal privileges when users log out of terminals, which allows local users to write to other u...

📅 2001-12-31
CVSS 4.6 Dossier →
CVE-2001-1503 UNKNOWN
Component: solaris

The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host by typing...

📅 2001-12-31
CVSS 2.1 Dossier →
CVE-2001-1479 UNKNOWN
Component: management\+center

smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SMC_PORT....

📅 2001-12-31
CVSS 2.1 Dossier →
CVE-2001-0922 UNKNOWN
Component: netdynamics

ndcgi.exe in Netdynamics 4.x through 5.x, and possibly earlier versions, allows remote attackers to steal session IDs and hijack user sessions by read...

📅 2001-11-26
CVSS 7.5 Dossier →
CVE-2001-0652 UNKNOWN
Component: sunos

Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long (1) XFILESEARCHPATH or (2) XUSERFILESEARCHPATH e...

📅 2001-10-30
CVSS 7.2 Dossier →
CVE-2001-0779 UNKNOWN
Component: solaris

Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username....

📅 2001-10-18
CVSS 10.0 Dossier →
CVE-2001-1414 UNKNOWN
Component: solaris

The Basic Security Module (BSM) for Solaris 2.5.1, 2.6, 7, and 8 does not log anonymous FTP access, which allows remote attackers to hide their activi...

📅 2001-10-09
CVSS 7.5 Dossier →
CVE-2001-0701 UNKNOWN
Component: sunvts

Buffer overflow in ptexec in the Sun Validation Test Suite 4.3 and earlier allows a local user to gain privileges via a long -o argument....

📅 2001-09-20
CVSS 7.2 Dossier →
CVE-2001-0699 UNKNOWN
Component: sunos

Buffer overflow in cb_reset in the System Service Processor (SSP) package of SunOS 5.8 allows a local user to execute arbitrary code via a long argume...

📅 2001-09-20
CVSS 7.2 Dossier →
CVE-2001-0686 UNKNOWN
Component: solaris

Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable....

📅 2001-09-20
CVSS 4.6 Dossier →
CVE-2001-1066 UNKNOWN
Component: solaris

ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files ...

📅 2001-08-31
CVSS 2.1 Dossier →
CVE-2001-1008 UNKNOWN
Component: java_plug-in

Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized act...

📅 2001-08-31
CVSS 7.5 Dossier →
CVE-2001-0634 UNKNOWN
Component: chilisoft

Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denia...

📅 2001-08-22
CVSS 7.2 Dossier →
CVE-2001-0633 UNKNOWN
Component: chilisoft

Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '...

📅 2001-08-22
CVSS 5.0 Dossier →
CVE-2001-0632 UNKNOWN
Component: chilisoft

Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attac...

📅 2001-08-22
CVSS 7.5 Dossier →
Page 45 of 49 (1,172 Total Records)