Total 1,172 security vulnerabilities recorded for sun software and firmware.
StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack....
The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files....
The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords....
The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibl...
Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option....
The recover program in Solstice Backup allows local users to restore sensitive files....
Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: t...
Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string begi...
/usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbi...
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vuln...
The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the ...
Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Ope...
Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database....
Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database....
Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request....
Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service....
Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode....
The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file....
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack....
Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly....
Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type....
Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option....
Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to...
Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable....