Sun
Page 17 of 18 — Sun CVEs from a corpus of 1705, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-1999-0054 | | 1998-06-10 | Sun's ftpd daemon can be subjected to a denial of service. | |
CVE-1999-0008 | | 1998-06-08 | Buffer overflow in NIS+, in Sun's rpc.nisd program. | |
CVE-1999-0303 | | 1998-05-21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames. | |
CVE-1999-0055 | | 1998-05-14 | Buffer overflows in Sun libnsl allow root access. | |
CVE-1999-1027 | | 1998-05-07 | Solaris 2.6 HW3/98 installs admintool with world-writable permissions, which allows local users to gain privileges by replacing it with a Trojan horse program. | |
CVE-1999-0212 | | 1998-04-29 | Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server. | |
CVE-1999-0069 | High | 8.4 | 1998-04-29 | Solaris ufsrestore buffer overflow. |
CVE-1999-0190 | | 1998-04-08 | Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. | |
CVE-1999-0011 | Medium | 5.4 | 1998-04-08 | Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer. |
CVE-1999-0010 | | 1998-04-08 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages. | |
CVE-1999-0009 | | 1998-04-08 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases. | |
CVE-1999-0003 | | 1998-04-01 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd). | |
CVE-1999-1118 | | 1998-03-11 | ndd in Solaris 2.6 allows local users to cause a denial of service by modifying certain TCP/IP parameters. | |
CVE-1999-0795 | | 1998-03-01 | The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify c… | |
CVE-1999-0502 | | 1998-03-01 | A Unix account has a default, null, blank, or missing password. | |
CVE-1999-0320 | | 1998-03-01 | SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files. | |
CVE-1999-0296 | | 1998-02-01 | Solaris volrmmount program allows attackers to read any file. | |
CVE-1999-0125 | | 1998-01-25 | Buffer overflow in SGI IRIX mailx program. | |
CVE-1999-0513 | | 1998-01-05 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | |
CVE-1999-0273 | | 1998-01-01 | Denial of service through Solaris 2.5.1 telnet by sending ^D characters. | |
CVE-1999-0104 | | 1997-12-16 | A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2. | |
CVE-1999-0015 | | 1997-12-16 | Teardrop IP denial of service. | |
CVE-1999-0017 | | 1997-12-10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce. | |
CVE-1999-0018 | | 1997-12-05 | Buffer overflow in statd allows root privileges. | |
CVE-1999-0016 | | 1997-12-01 | Land IP denial of service. | |
CVE-1999-0210 | | 1997-11-26 | Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters. | |
CVE-1999-1428 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with s… | |
CVE-1999-1427 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges. | |
CVE-1999-1426 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 follows symbolic links when updating an NIS database, which allows local users to overwrite arbitrary files. | |
CVE-1999-1425 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges… | |
CVE-1999-1424 | | 1997-11-10 | Solaris Solstice AdminSuite (AdminSuite) 2.1 uses unsafe permissions when adding new users to the NIS+ password table, which allows local users to gain root ac… | |
CVE-1999-0097 | | 1997-10-29 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g. a pipe character). | |
CVE-1999-0300 | | 1997-10-01 | nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers. | |
CVE-1999-0295 | | 1997-10-01 | Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. | |
CVE-1999-0185 | | 1997-10-01 | In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote comma… | |
CVE-1999-1225 | | 1997-08-24 | rpc.mountd on Linux, Ultrix, and possibly other operating systems, allows remote attackers to determine the existence of a file on the server by attempting to… | |
CVE-1999-0024 | | 1997-08-13 | DNS cache poisoning via BIND, by predictable query IDs. | |
CVE-1999-0301 | | 1997-08-01 | Buffer overflow in SunOS/Solaris ps command. | |
CVE-1999-1419 | | 1997-07-30 | Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges. | |
CVE-1999-0169 | | 1997-07-01 | NFS allows attackers to read and write any file on the system by specifying a false UID. | |
CVE-1999-1423 | | 1997-06-26 | ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interfac… | |
CVE-1999-1192 | | 1997-06-24 | Buffer overflow in eeprom in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. | |
CVE-1999-0033 | | 1997-06-12 | Command execution in Sun systems via buffer overflow in the at program. | |
CVE-1999-0189 | | 1997-06-04 | Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. | |
CVE-1999-1449 | | 1997-05-19 | SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device. | |
CVE-1999-1191 | | 1997-05-19 | Buffer overflow in chkey in Solaris 2.5.1 and earlier allows local users to gain root privileges via a long command line argument. | |
CVE-1999-1402 | | 1997-05-17 | The access permissions for a UNIX domain socket are ignored in Solaris 2.x and SunOS 4.x, and other BSD-based operating systems before 4.4, which could allow l… | |
CVE-1999-1158 | | 1997-05-13 | Buffer overflow in (1) pluggable authentication module (PAM) on Solaris 2.5.1 and 2.5 and (2) unix_scheme in Solaris 2.4 and 2.3 allows local users to gain roo… | |
CVE-1999-0040 | | 1997-05-01 | Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges. | |
CVE-1999-0038 | High | 8.4 | 1997-04-26 | Buffer overflow in xlock program allows local users to execute commands as root. |
CVE-1999-0315 | | 1997-04-01 | Buffer overflow in Solaris fdformat command gives root access to local users. | |
CVE-1999-0318 | | 1997-03-01 | Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable. | |
CVE-1999-0165 | | 1997-03-01 | NFS cache poisoning. | |
CVE-1999-0868 | | 1997-02-20 | ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN. | |
CVE-1999-0109 | | 1997-02-10 | Buffer overflow in ffbconfig in Solaris 2.5.1. | |
CVE-1999-0046 | | 1997-02-06 | Buffer overflow of rlogin program using TERM environmental variable. | |
CVE-1999-0298 | | 1997-02-05 | ypbind with -ypset and -ypsetme options activated in Linux Slackware and SunOS allows local and remote attackers to overwrite files via a .. (dot dot) attack. | |
CVE-1999-0369 | | 1997-02-01 | The Sun sdtcm_convert calendar utility for OpenWindows has a buffer overflow which can gain root access. | |
CVE-1999-0966 | | 1997-01-27 | Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0]. | |
CVE-1999-0051 | | 1997-01-06 | Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX. | |
CVE-1999-0626 | | 1997-01-01 | A version of rusers is running that exposes valid user information to any entity on the network. | |
CVE-1999-0517 | Medium | 5.9 | 1997-01-01 | An SNMP community name is the default (e.g. public), null, or missing. |
CVE-1999-0345 | | 1997-01-01 | Jolt ICMP attack causes a denial of service in Windows 95 and Windows NT systems. | |
CVE-1999-0217 | | 1997-01-01 | Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. | |
CVE-1999-0166 | | 1997-01-01 | NFS allows users to use a "cd .." command to access other directories besides the exported file system. | |
CVE-1999-1026 | | 1996-12-20 | aspppd on Solaris 2.5 x86 allows local users to modify arbitrary files and gain root privileges via a symlink attack on the /tmp/.asppp.fifo file. | |
CVE-1999-0128 | | 1996-12-18 | Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death. | |
CVE-1999-0129 | | 1996-12-03 | Sendmail allows local users to write to a file and gain group permissions via a .forward or :include: file. | |
CVE-1999-0277 | | 1996-10-28 | The WorkMan program can be used to overwrite any file to get root access. | |
CVE-1999-0032 | | 1996-10-25 | Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) comma… | |
CVE-1999-0132 | | 1996-08-15 | Expreserve, as used in vi and ex, allows local users to overwrite arbitrary files and gain root access. | |
CVE-1999-0134 | | 1996-08-06 | vold in Solaris 2.x allows local users to gain root access. | |
CVE-1999-1413 | | 1996-08-03 | Solaris 2.4 before kernel jumbo patch -35 allows set-gid programs to dump core even if the real user id is not in the set-gid group, which allows local users t… | |
CVE-1999-0136 | | 1996-07-31 | Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access. | |
CVE-1999-0135 | | 1996-07-25 | admintool in Solaris allows a local user to write to arbitrary files and gain root access. | |
CVE-1999-0023 | | 1996-07-24 | Local user gains root privileges via buffer overflow in rdist, via lookup() function. | |
CVE-1999-0022 | High | 7.8 | 1996-07-03 | Local user gains root privileges via buffer overflow in rdist, via expstr() function. |
CVE-1999-0019 | | 1996-04-24 | Delete or create a file via rpc.statd, due to invalid information. | |
CVE-1999-0078 | | 1996-04-18 | pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. | |
CVE-1999-0142 | | 1996-03-01 | The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts. | |
CVE-1999-0143 | | 1996-02-21 | Kerberos 4 key servers allow a user to masquerade as another by breaking and generating session keys. | |
CVE-1999-0241 | | 1995-11-01 | Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. | |
CVE-1999-0099 | | 1995-10-19 | Buffer overflow in syslog utility allows local or remote attackers to gain root privileges. | |
CVE-1999-0164 | | 1995-08-29 | A race condition in the Solaris ps command allows an attacker to overwrite critical files. | |
CVE-1999-1580 | | 1995-08-23 | SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Inter… | |
CVE-1999-1080 | | 1995-05-10 | rmmount in SunOS 5.7 may mount file systems without the nosuid flag set, contrary to the documentation and its use in previous versions of SunOS, which could a… | |
CVE-1999-1388 | | 1994-05-13 | passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument. | |
CVE-1999-0120 | | 1994-03-21 | Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root. | |
CVE-1999-0211 | | 1994-02-14 | Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone. | |
CVE-1999-0334 | | 1993-12-16 | In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access. | |
CVE-1999-1137 | | 1993-10-01 | The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an… | |
CVE-1999-1318 | | 1993-09-17 | /usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Tro… | |
CVE-1999-1507 | | 1993-02-03 | Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash. | |
CVE-1999-1021 | | 1992-12-30 | NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0… | |
CVE-1999-1396 | | 1992-07-21 | Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a den… | |
CVE-1999-0214 | | 1992-07-21 | Denial of service by sending forged ICMP unreachable packets. | |
CVE-1999-0168 | | 1992-06-04 | The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing aut… | |
CVE-1999-1142 | | 1992-05-27 | SunOS 4.1.2 and earlier allows local users to gain privileges via "LD_*" environmental variables to certain dynamically linked setuid or setgid programs such a… | |
CVE-1999-0167 | | 1991-12-06 | In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system. | |
CVE-1999-1468 | | 1991-10-22 | rdist in various UNIX systems uses popen to execute sendmail, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator)… |