Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Total 1712 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0209 1 Sun 1 Sunos 2008-09-09 5.0 MEDIUM N/A
The SunView (SunTools) selection_svc facility allows remote users to read files.
CVE-1999-0186 1 Sun 1 Solaris 2008-09-09 10.0 HIGH N/A
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters.
CVE-1999-0164 1 Sun 1 Sunos 2008-09-09 6.2 MEDIUM N/A
A race condition in the Solaris ps command allows an attacker to overwrite critical files.
CVE-1999-0134 1 Sun 1 Sunos 2008-09-09 7.2 HIGH N/A
vold in Solaris 2.x allows local users to gain root access.
CVE-1999-0057 5 Eric Allman, Freebsd, Hp and 2 more 7 Vacation, Freebsd, Hp-ux and 4 more 2008-09-09 7.5 HIGH N/A
Vacation program allows command execution by remote users through a sendmail command.
CVE-1999-0032 5 Bsdi, Freebsd, Next and 2 more 5 Bsd Os, Freebsd, Nextstep and 2 more 2008-09-09 7.2 HIGH N/A
Buffer overflow in lpr, as used in BSD-based systems including Linux, allows local users to execute arbitrary code as root via a long -C (classification) command line option.
CVE-1999-0019 7 Data General, Ibm, Ncr and 4 more 10 Dg Ux, Aix, Mp-ras and 7 more 2008-09-09 5.0 MEDIUM N/A
Delete or create a file via rpc.statd, due to invalid information.
CVE-1999-0016 6 Cisco, Gnu, Hp and 3 more 8 Ios, Inet, Hp-ux and 5 more 2008-09-09 5.0 MEDIUM N/A
Land IP denial of service.
CVE-2007-3025 2 Clam Anti-virus, Sun 2 Clamav, Solaris 2008-09-05 5.0 MEDIUM N/A
Unspecified vulnerability in libclamav/phishcheck.c in ClamAV before 0.90.3 and 0.91 before 0.91rc1, when running on Solaris, allows remote attackers to cause a denial of service (hang) via unknown vectors related to the isURL function and regular expressions.
CVE-2005-4805 1 Sun 1 Java System Application Server 2008-09-05 5.0 MEDIUM N/A
Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.
CVE-2005-3238 1 Sun 1 Solaris 2008-09-05 2.1 LOW N/A
Multiple unspecified vulnerabilities in Solaris 10 SCTP Socket Option Processing allows local users to cause a denial of service (panic) via unspecified attack vectors.
CVE-2005-2870 1 Sun 1 Solaris 2008-09-05 7.5 HIGH N/A
Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DHCP responses.
CVE-2005-1150 1 Sun 1 Java System Web Server 2008-09-05 5.0 MEDIUM N/A
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang).
CVE-2005-0576 1 Sun 1 Solaris 2008-09-05 3.6 LOW N/A
Unknown vulnerability in Standard Type Services Framework (STSF) Font Server Daemon (stfontserverd) in Solaris 9 allows local users to modify or delete arbitrary files.
CVE-2005-0418 1 Sun 1 J2se 2008-09-05 7.5 HIGH N/A
Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file. NOTE: it is highly likely that this item will be MERGED with CVE-2005-0836.
CVE-2003-1521 1 Sun 1 Java Plug-in 2008-09-05 6.4 MEDIUM N/A
Sun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy drive via the createXmlDocument method in the org.apache.crimson.tree.XmlDocument class, which violates the Java security model.
CVE-2003-1516 1 Sun 1 Java Plug-in 2008-09-05 6.8 MEDIUM N/A
The org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed and unsigned applets to share variables, which violates the Java security model and could allow remote attackers to read or write data belonging to a signed applet.
CVE-2003-1134 1 Sun 1 Java 2008-09-05 2.1 LOW N/A
Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception.
CVE-2003-1126 1 Sun 1 One Web Server 2008-09-05 5.0 MEDIUM N/A
Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service.
CVE-2003-1125 1 Sun 1 One Directory Server 2008-09-05 5.0 MEDIUM N/A
Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service halt).