Sun
Page 16 of 18 — Sun CVEs from a corpus of 1705, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2001-0059 | | 2001-02-12 | patchadd in Solaris allows local users to overwrite arbitrary files via a symlink attack. | |
CVE-2000-1156 | | 2001-01-09 | StarOffice 5.2 follows symlinks and sets world-readable permissions for the /tmp/soffice.tmp directory, which allows a local user to read files of the user who… | |
CVE-2000-1099 | | 2001-01-09 | Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allo… | |
CVE-2000-0958 | | 2000-12-19 | HotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a javascript: URL in a named window. | |
CVE-2000-0949 | | 2000-12-19 | Heap overflow in savestr function in LBNL traceroute 1.4a5 and earlier allows a local user to execute arbitrary commands via the -g option. | |
CVE-2000-1076 | | 2000-12-11 | Netscape (iPlanet) Certificate Management System 4.2 and Directory Server 4.12 stores the administrative password in plaintext, which could allow local and pos… | |
CVE-2000-1075 | | 2000-12-11 | Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a… | |
CVE-2000-0844 | | 2000-11-14 | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbit… | |
CVE-2000-0812 | | 2000-11-14 | The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com… | |
CVE-2000-0697 | | 2000-10-20 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 allows interface users to remotely execute commands via shell metacharacters. | |
CVE-2000-0696 | | 2000-10-20 | The administration interface for the dwhttpd web server in Solaris AnswerBook2 does not properly authenticate requests to its supporting CGI scripts, which all… | |
CVE-2000-0629 | | 2000-07-12 | The default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to execute arbitrary commands by uploading Java code to the server… | |
CVE-2000-0471 | | 2000-06-14 | Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname. | |
CVE-2000-0442 | | 2000-05-24 | Qpopper 2.53 and earlier allows local users to gain privileges via a formatting string in the From: header, which is processed by the euidl command. | |
CVE-2000-0431 | | 2000-05-22 | Cobalt RaQ2 and RaQ3 does not properly set the access permissions and ownership for files that are uploaded via FrontPage, which allows attackers to bypass cgi… | |
CVE-2000-0407 | | 2000-05-12 | Buffer overflow in Solaris netpr program allows local users to execute arbitrary commands via a long -p option. | |
CVE-2000-0337 | | 2000-04-24 | Buffer overflow in Xsun X server in Solaris 7 allows local users to gain root privileges via a long -dev parameter. | |
CVE-2000-0317 | | 2000-04-24 | Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option. | |
CVE-2000-0316 | | 2000-04-24 | Buffer overflow in Solaris 7 lp allows local users to gain root privileges via a long -d option. | |
CVE-2000-0320 | | 2000-04-21 | Qpopper 2.53 and 3.0 does not properly identify the \n string which identifies the end of message text, which allows a remote attacker to cause a denial of ser… | |
CVE-2000-0291 | | 2000-04-16 | Buffer overflow in Star Office 5.1 allows attackers to cause a denial of service by embedding a long URL within a document. | |
CVE-2000-0234 | | 2000-03-31 | The default configuration of Cobalt RaQ2 and RaQ3 as specified in access.conf allows remote attackers to view sensitive contents of a .htaccess file. | |
CVE-2000-0175 | | 2000-03-09 | Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET command. | |
CVE-2000-0174 | | 2000-03-09 | StarOffice StarScheduler web server allows remote attackers to read arbitrary files via a .. (dot dot) attack. | |
CVE-2000-0210 | | 2000-02-21 | The lit program in Sun Flex License Manager (FlexLM) follows symlinks, which allows local users to modify arbitrary files. | |
CVE-2000-0164 | | 2000-02-20 | The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain passwords. | |
CVE-2000-0117 | | 2000-01-30 | The siteUserMod.cgi program in Cobalt RaQ2 servers allows any Site Administrator to modify passwords for other users, site administrators, and possibly admin (… | |
CVE-2000-0055 | | 2000-01-06 | Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option. | |
CVE-2000-0069 | | 2000-01-01 | The recover program in Solstice Backup allows local users to restore sensitive files. | |
CVE-1999-1592 | | 1999-12-31 | Multiple unspecified vulnerabilities in sendmail 5, as installed on Sun SunOS 4.1.3_U1 and 4.1.4, have unspecified attack vectors and impact. NOTE: this might… | |
CVE-1999-1588 | Critical | 9.8 | 1999-12-31 | Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning wit… |
CVE-1999-1587 | | 1999-12-31 | /usr/ucb/ps in Sun Microsystems Solaris 8 and 9, and certain earlier releases, allows local users to view the environment variables and values of arbitrary pro… | |
CVE-1999-1586 | | 1999-12-31 | loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability… | |
CVE-1999-1585 | | 1999-12-31 | The (1) rcS and (2) mountall programs in Sun Solaris 2.x, possibly before 2.4, start a privileged shell on the system console if fsck fails while the system is… | |
CVE-1999-1584 | | 1999-12-31 | Unknown vulnerability in (1) loadmodule, and (2) modload if modload is installed with setuid/setgid privileges, in SunOS 4.1.1 through 4.1.3c, and Open Windows… | |
CVE-1999-1102 | | 1999-12-31 | lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via a symlink attack t… | |
CVE-2000-0032 | | 1999-12-22 | Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database. | |
CVE-2000-0030 | | 1999-12-22 | Solaris dmispd dmi_cmd allows local users to fill up restricted disk space by adding files to the /var/dmi/db database. | |
CVE-1999-0977 | | 1999-12-10 | Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request. | |
CVE-1999-0974 | | 1999-12-09 | Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquotad service. | |
CVE-1999-0973 | | 1999-12-07 | Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when snoop is running in verbose mode. | |
CVE-1999-0982 | | 1999-12-05 | The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable file. | |
CVE-1999-0860 | | 1999-12-01 | Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack. | |
CVE-1999-0859 | | 1999-12-01 | Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. | |
CVE-1999-0841 | | 1999-11-30 | Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type. | |
CVE-1999-0840 | | 1999-11-30 | Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option. | |
CVE-1999-1527 | | 1999-11-23 | Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does not properly restrict access to IP addre… | |
CVE-1999-0818 | | 1999-11-20 | Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable. | |
CVE-1999-0831 | | 1999-11-19 | Denial of service in Linux syslogd via a large number of connections. | |
CVE-1999-0851 | | 1999-11-10 | Denial of service in BIND named via naptr. | |
CVE-1999-0848 | | 1999-11-10 | Denial of service in BIND named via consuming more than "fdmax" file descriptors. | |
CVE-1999-0837 | | 1999-11-10 | Denial of service in BIND by improperly closing TCP sessions via so_linger. | |
CVE-1999-0835 | | 1999-11-10 | Denial of service in BIND named via malformed SIG records. | |
CVE-1999-0833 | | 1999-11-10 | Buffer overflow in BIND 8.2 via NXT records. | |
CVE-1999-1530 | | 1999-11-08 | cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to vi… | |
CVE-1999-0949 | | 1999-11-02 | Buffer overflow in canuum program for Canna input system allows local users to gain root privileges. | |
CVE-1999-0948 | | 1999-11-02 | Buffer overflow in uum program for Canna input system allows local users to gain root privileges. | |
CVE-1999-0908 | | 1999-09-23 | Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter. | |
CVE-1999-0786 | | 1999-09-22 | The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack. | |
CVE-1999-1014 | | 1999-09-13 | Buffer overflow in mail command in Solaris 2.7 and 2.7 allows local users to gain privileges via a long -m argument. | |
CVE-1999-0691 | | 1999-09-13 | Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | |
CVE-1999-0689 | | 1999-09-13 | The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. | |
CVE-1999-0687 | | 1999-09-13 | The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. | |
CVE-1999-0767 | | 1999-09-08 | Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. | |
CVE-1999-0875 | | 1999-08-11 | DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. | |
CVE-1999-0676 | | 1999-08-09 | sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack. | |
CVE-1999-0674 | | 1999-08-09 | The BSD profil system call allows a local user to modify the internal data space of a program via profiling and execve. | |
CVE-1999-0722 | | 1999-08-08 | The default configuration of Cobalt RaQ2 servers allows remote users to install arbitrary software packages. | |
CVE-1999-0696 | | 1999-07-01 | Buffer overflow in CDE Calendar Manager Service Daemon (rpc.cmsd). | |
CVE-1999-1023 | | 1999-06-10 | useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login a… | |
CVE-2000-0118 | | 1999-06-09 | The Red Hat Linux su program does not log failed password guesses if the su process is killed before it times out, which allows local attackers to conduct brut… | |
CVE-1999-0493 | | 1999-06-07 | rpc.statd allows remote attackers to forward RPC calls to the local operating system via the SM_MON and SM_NOTIFY commands, which in turn could be used to remo… | |
CVE-1999-0773 | | 1999-05-11 | Buffer overflow in Solaris lpset program allows local users to gain root access. | |
CVE-1999-0806 | | 1999-05-10 | Buffer overflow in Solaris dtprintinfo program. | |
CVE-1999-0417 | | 1999-03-09 | 64 bit Solaris 7 procfs allows local users to perform a denial of service. | |
CVE-1999-1371 | | 1999-03-08 | Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument. | |
CVE-1999-0410 | | 1999-03-05 | The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access. | |
CVE-1999-0440 | | 1999-03-01 | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. | |
CVE-1999-0223 | | 1999-03-01 | Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry. | |
CVE-1999-0408 | | 1999-02-25 | Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server. | |
CVE-1999-0370 | | 1999-02-10 | In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files. | |
CVE-1999-0952 | | 1999-01-28 | Buffer overflow in Solaris lpstat via class argument allows local users to gain root access. | |
CVE-1999-0442 | | 1999-01-07 | Solaris ff.core allows local users to modify files. | |
CVE-1999-0568 | | 1999-01-01 | rpc.admind in Solaris is not running in a secure mode. | |
CVE-1999-0188 | | 1998-12-17 | The passwd command in Solaris can be subjected to a denial of service. | |
CVE-1999-0139 | | 1998-12-12 | Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access. | |
CVE-1999-0321 | | 1998-12-01 | Buffer overflow in Solaris kcms_configure command allows local users to gain root access. | |
CVE-1999-0057 | | 1998-11-16 | Vacation program allows command execution by remote users through a sendmail command. | |
CVE-1999-1025 | | 1998-11-12 | CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows… | |
CVE-1999-0254 | | 1998-11-02 | A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. | |
CVE-1999-0186 | | 1998-10-01 | In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. | |
CVE-1999-0056 | | 1998-09-09 | Buffer overflow in Sun's ping program can give root access to local users. | |
CVE-1999-0302 | | 1998-09-01 | SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server. | |
CVE-1999-0065 | | 1998-08-31 | Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands. | |
CVE-1999-0339 | | 1998-08-01 | Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access. | |
CVE-1999-1432 | | 1998-07-16 | Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attac… | |
CVE-1999-0263 | | 1998-07-16 | Solaris SUNWadmap can be exploited to obtain root access. | |
CVE-1999-1297 | | 1998-07-15 | cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as… | |
CVE-1999-0213 | | 1998-07-15 | libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind. | |
CVE-1999-0797 | | 1998-06-29 | NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries. |