Total 1,172 security vulnerabilities recorded for sun software and firmware.
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administra...
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_ent...
The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack....
Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument....
Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable....
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack....
The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages....
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users t...
rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be use...
Buffer overflow in Solaris lpset program allows local users to gain root access....
64 bit Solaris 7 procfs allows local users to perform a denial of service....
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument....
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access....
Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry....
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web...
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files....
Buffer overflow in Solaris lpstat via class argument allows local users to gain root access....