CVE-2001-0652

Heap overflow in xlock in Solaris 2.6 through 8 allows local users to gain root privileges via a long 1 XFILESEARCHPATH or 2 XUSERFILESEARCHPATH environmental variable...

CVE-2001-0779

Buffer overflow in rpc.yppasswdd yppasswd server in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username...

CVE-1999-1207

CVE-1999-1207: A buffer overflow in the web-admin tool of NetXRay 2.6 can be triggered by a long HTTP request, allowing remote denial of service and potentially arbitrary command execution. The NVD entry lists a Network attack vector, low complexity, no auth, with partial confidentiality, integri...

CVE-1999-1371

Buffer overflow in /usr/bin/write on Solaris 2.6 and 7 allows local privilege escalation via a long string in the terminal name argument. Exploitation details are not provided in the connected documents; remediation/fixes are not specified here.

CVE-1999-1371

Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument...

CVE-1999-1025

The CVE-1999-1025 issue affects Solaris 2.6 where the CDE screen lock program (screenlock) fails to lock an unprivileged user’s console session when the host is an NIS+ client, enabling anyone with physical access to login using arbitrary strings. Affected component: CDE screenlock on Solaris 2.6...

CVE-1999-1025

CDE screen lock program screenlock on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with physical access to login with any string...

CVE-1999-1207

Buffer overflow in web-admin tool in NetXRay 2.6 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request...

Bug in compile portion for older versions of CheckPoint Firewalls

There is a bug in how CheckPoint firewalls prior to version 4.0 SP2 handled compiling the firewall policy on Solaris workstations. I was actually migrating a client from version 4.0 SP1 when I stumbled on this. The vendor was contacted on January 30, 2001 and responded on February 2, 2001 that th...

CVE-2001-0548

Buffer overflow in dtmail in Solaris 2.6 and 7 allows local users to gain privileges via the MAIL environment variable...

Solaris 2.6/7.0 - DTMail Mail Environment Variable Buffer Overflow

// source: https://www.securityfocus.com/bid/3081/info dtmail is an application included with the Common Desktop Environment, one of the X Window Managers included with Solaris. A buffer overflow in dtmail makes it possible for a local user to gain elevated privileges. Due to improper bounds...

solaris 2.6, 7 yppasswd vulnerability

Vulnerability Report Vulnerability: Buffer overflow in yppasswd service Affects: Solaris 6, 7 SPARC tested, x86 unknown Exploit: In circulation http://www.hack.co.za/ Vendor Patch: Not yet. Various people have contacted Sun about this. No official word yet. Workarounds supplied included. Credits:...

CVE-2001-0124

CVE-2001-0124 describes a buffer overflow in the Solaris utility exrecover on Solaris 2.6 and earlier, potentially allowing a local user to gain privileges via a long command line argument. The connected documents do not specify a vendor patch/version or a remediation. The exploitation status is ...

CVE-2000-0313

Technical details about CVE-2000-0313 are not provided in the connected documents. The initial description mentions an OpenBSD 2.6 local interface-media change issue, but no concrete product/version specifics or remediation are included here. Monitor for updates.

CVE-2001-0124

Buffer overflow in exrecover in Solaris 2.6 and earlier possibly allows local users to gain privileges via a long command line argument...

Solaris mailx Vulnerability

Vulnerability in Solaris mailx1 Date Published: April 11, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris mailx1 Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The mai...

CVE-2000-0914

OpenBSD 2.6 and earlier are affected. The vulnerability enables remote denial of service by flooding the target server with ARP requests. Concrete details provided: affected product (OpenBSD

Solaris /usr/bin/cu Vulnerability

Description The /usr/bin/cu command contains a buffer overflow, the problem occurs when it copy his own name argv0 to an internal variable without checking out its lenght and this causes the overflow. Vulnerable Versions Sun Solaris 2.4 Sun Solaris 2.5 Sun Solaris 2.5.1 Sun Solaris 2.6 Sun Solari...

OpenBSD 2.6 / 2.7ftpd Remote Exploit

Exploit for bsd platform in category remote exploits ==================================== OpenBSD 2.6 / 2.7ftpd Remote Exploit ==================================== / h0h0h0 0-day k0d3z Exploit by Scrippie, help by dvorak and jimjones greets to sk8 Not fully developt exploit but it works most of t...

Solaris 2.6/7.0 - lp -d Option Buffer Overflow

// source: https://www.securityfocus.com/bid/1143/info A buffer overrun has been discovered in the lp program, as included with Sun's Solaris 7 operating system. By passing well crafted, machine executable code of sufficient length to the -d option of lp, it becomes possible to execute arbitrary...