Total 1,172 security vulnerabilities recorded for sun software and firmware.
Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" (process name) argument....
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu...
Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument....
Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter....
catman in Solaris 2.7 and 2.8 allows local users to overwrite arbitrary files via a symlink attack on the sman_PID temporary file....
in.mond in Sun Cluster 2.x allows local users to read arbitrary files via a symlink attack on the status file of a host running HA-NFS....
The clustmon service in Sun Cluster 2.x does not require authentication, which allows remote attackers to obtain sensitive information such as system ...
patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack....
StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the...
Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which c...
HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window....
The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke...
The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metachara...
The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, ...
The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to t...
Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname....
Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to b...
Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option....
Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter....
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option....
Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option....
Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document....
The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file....
Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command....