Total
609 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-1999-0211 | 1 Sun | 1 Sunos | 2024-02-22 | 5.0 MEDIUM | N/A |
Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone. | |||||
CVE-2007-0882 | 2 Oracle, Sun | 2 Solaris, Sunos | 2024-02-14 | 10.0 HIGH | N/A |
Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the login program to skip authentication, which allows remote attackers to log into certain accounts, as demonstrated by the bin account. | |||||
CVE-1999-0046 | 10 Bsdi, Debian, Digital and 7 more | 10 Bsd Os, Debian Linux, Ultrix and 7 more | 2024-02-09 | 10.0 HIGH | N/A |
Buffer overflow of rlogin program using TERM environmental variable. | |||||
CVE-2002-1337 | 7 Gentoo, Hp, Netbsd and 4 more | 9 Linux, Alphaserver Sc, Hp-ux and 6 more | 2024-02-09 | 10.0 HIGH | N/A |
Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c. | |||||
CVE-2002-0391 | 4 Freebsd, Microsoft, Openbsd and 1 more | 7 Freebsd, Windows 2000, Windows Nt and 4 more | 2024-02-08 | 10.0 HIGH | 9.8 CRITICAL |
Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd. | |||||
CVE-2004-1353 | 1 Sun | 2 Solaris, Sunos | 2023-11-07 | 7.2 HIGH | N/A |
Unknown vulnerability in LDAP on Sun Solaris 8 and 9, when using Role Based Access Control (RBAC), allows local users to execute certain commands with additional privileges. | |||||
CVE-2004-1352 | 1 Sun | 2 Solaris, Sunos | 2023-11-07 | 7.2 HIGH | N/A |
Buffer overflow in the ping daemon of Sun Solaris 7 through 9 may allow local users to execute arbitrary code. | |||||
CVE-2004-1351 | 1 Sun | 2 Solaris, Sunos | 2023-11-07 | 10.0 HIGH | N/A |
Unknown vulnerability in the rwho daemon (in.rwhod) for Solaris 7 through 9 allows remote attackers to execute arbitrary code. | |||||
CVE-2001-0779 | 1 Sun | 2 Solaris, Sunos | 2023-11-07 | 10.0 HIGH | N/A |
Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username. | |||||
CVE-1999-0875 | 2 Microsoft, Sun | 5 Windows 2000, Windows 95, Windows 98se and 2 more | 2023-11-07 | 7.5 HIGH | N/A |
DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. | |||||
CVE-1999-0818 | 1 Sun | 2 Solaris, Sunos | 2023-11-07 | 7.2 HIGH | N/A |
Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable. | |||||
CVE-1999-0676 | 1 Sun | 2 Solaris, Sunos | 2023-11-07 | 4.6 MEDIUM | N/A |
sdtcm_convert in Solaris 2.6 allows a local user to overwrite sensitive files via a symlink attack. | |||||
CVE-2013-0543 | 4 Hp, Ibm, Linux and 1 more | 4 Hp-ux, Websphere Application Server, Linux Kernel and 1 more | 2022-12-13 | 6.8 MEDIUM | N/A |
IBM WebSphere Application Server (WAS) 6.1 before 6.1.0.47, 7.0 before 7.0.0.29, 8.0 before 8.0.0.6, and 8.5 before 8.5.0.2 on Linux, Solaris, and HP-UX, when a Local OS registry is used, does not properly validate user accounts, which allows remote attackers to bypass intended access restrictions via unspecified vectors. | |||||
CVE-2012-1717 | 5 Linux, Oracle, Redhat and 2 more | 19 Linux Kernel, Jdk, Jre and 16 more | 2022-12-13 | 2.1 LOW | N/A |
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows local users to affect confidentiality via unknown vectors related to printing on Solaris or Linux. | |||||
CVE-2001-1583 | 1 Sun | 1 Sunos | 2022-09-13 | 10.0 HIGH | N/A |
lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220. | |||||
CVE-1999-0966 | 1 Sun | 1 Sunos | 2022-08-17 | 7.2 HIGH | N/A |
Buffer overflow in Solaris getopt in libc allows local users to gain root privileges via a long argv[0]. | |||||
CVE-1999-0214 | 1 Sun | 1 Sunos | 2022-08-17 | 10.0 HIGH | N/A |
Denial of service by sending forged ICMP unreachable packets. | |||||
CVE-1999-0165 | 3 Bsdi, Linux, Sun | 5 Bsd Os, Linux Kernel, Nfs and 2 more | 2022-08-17 | 10.0 HIGH | N/A |
NFS cache poisoning. | |||||
CVE-1999-0795 | 1 Sun | 2 Solaris, Sunos | 2022-08-17 | 7.5 HIGH | N/A |
The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches. | |||||
CVE-1999-0517 | 2 Hp, Sun | 2 Hp-ux, Sunos | 2022-08-17 | 7.5 HIGH | N/A |
An SNMP community name is the default (e.g. public), null, or missing. |