Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Total 1712 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0481 1 Sun 2 Solaris, Sunos 2018-10-30 2.1 LOW N/A
The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.
CVE-2005-1518 1 Sun 2 Solaris, Sunos 2018-10-30 2.1 LOW N/A
Unknown vulnerability in Solaris 7 through 9, when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, allows local users to cause a denial of service (automountd crash) when "accessing" /xfn/_x500.
CVE-2006-0227 1 Sun 2 Solaris, Sunos 2018-10-30 2.6 LOW N/A
Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors.
CVE-2006-4319 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary code via unknown vectors, a different vulnerability than CVE-2006-4307.
CVE-2006-5012 1 Sun 2 Solaris, Sunos 2018-10-30 6.6 MEDIUM N/A
Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent security messages from being logged via unspecified vectors.
CVE-2006-5215 3 Netbsd, Sun, X.org 4 Netbsd, Solaris, Sunos and 1 more 2018-10-30 2.6 LOW N/A
The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite arbitrary files, or read another user's Xsession errors file, via a symlink attack on a /tmp/xses-$USER file.
CVE-2006-3664 1 Sun 2 Solaris, Sunos 2018-10-30 5.0 MEDIUM N/A
Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv hang) via unknown vectors.
CVE-2004-0496 5 Gentoo, Linux, Mandrakesoft and 2 more 13 Linux, Linux Kernel, Mandrake Linux and 10 more 2018-10-30 7.2 HIGH N/A
Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.
CVE-2005-1591 1 Sun 2 Solaris, Sunos 2018-10-30 5.0 MEDIUM N/A
Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd disabled and NIS+ unavailable) via unknown vectors.
CVE-2003-0092 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.
CVE-1999-0773 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in Solaris lpset program allows local users to gain root access.
CVE-2005-0447 1 Sun 2 Solaris, Sunos 2018-10-30 5.0 MEDIUM N/A
Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets.
CVE-1999-0833 2 Isc, Sun 3 Bind, Solaris, Sunos 2018-10-30 7.5 HIGH N/A
Buffer overflow in BIND 8.2 via NXT records.
CVE-2000-0317 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in Solaris 7 lpset allows local users to gain root privileges via a long -r option.
CVE-1999-0908 1 Sun 2 Solaris, Sunos 2018-10-30 5.0 MEDIUM N/A
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
CVE-2003-1070 1 Sun 2 Solaris, Sunos 2018-10-30 5.0 MEDIUM N/A
Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash).
CVE-2002-0677 7 Caldera, Compaq, Hp and 4 more 9 Openunix, Unixware, Tru64 and 6 more 2018-10-30 7.5 HIGH N/A
CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.
CVE-2003-1058 1 Sun 2 Solaris, Sunos 2018-10-30 3.7 LOW N/A
The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or overwrite arbitrary files on the system, probably via a symlink attack on temporary server files.
CVE-2002-0436 1 Sun 2 Solaris, Sunos 2018-10-30 10.0 HIGH N/A
sscd_suncourier.pl CGI script in the Sun Sunsolve CD pack allows remote attackers to execute arbitrary commands via shell metacharacters in the email address parameter.
CVE-2001-0401 1 Sun 2 Solaris, Sunos 2018-10-30 7.2 HIGH N/A
Buffer overflow in tip in Solaris 8 and earlier allows local users to execute arbitrary commands via a long HOME environmental variable.