CVE-2003-1068

CVE-2003-1068 is a Solaris utmp_update buffer‑overflow vulnerability affecting Solaris 2.6–9 that can allow local users to gain root privileges. The connected OpenVAS entries reference the Solaris update 113650-02 for /usr/lib/utmp_update, indicating a patch is available. The CVE description note...

CVE-2003-1070

Technical details for CVE-2003-1070 are not publicly available in the provided documents; monitor for updates.

CVE-2003-1058

The CVE concerns the Xsun server on Sun Solaris (versions 2.6–9) when running in Direct Graphics Access (DGA) mode. A local user can trigger a denial-of-service (Xsun crash) or gain the ability to create/overwrite arbitrary files, probably via a symlink attack on temporary server files. Affected ...

CVE-2003-1071

The CVE-2003-1071 issue affects the Solaris wall daemon (rpc.walld) on Solaris 2.6–9. Local users can craft messages to logged-on users that appear to come from arbitrary UIDs by closing stderr before executing wall and supplying a spoofed From header. The attack is local and requires no authenti...

CVE-2003-1073

CVE-2003-1073 describes a race condition in the Solaris at command (affecting Solaris 2.6 through 9) that allows local users to delete arbitrary files. The flaw occurs when a -r argument containing .. sequences in a job name passes the permission check but before the deletion actually happens, en...

CVE-2003-1078

The FTP client for Solaris 2.6, 7, and 8 with the debug -d flag enabled displays the user password on the screen during login...

CVE-2003-1060

The CVE-2003-1060 entry describes a vulnerability in the NFS Server for Solaris 7, 8, and 9 where remote attackers can cause a denial of service (UFS panic) by sending certain invalid UFS requests that trigger a null dereference. Affected software is the NFS Server on Solaris 7–9; the underlying ...

CVE-2005-0045

The Server Message Block SMB implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, which allows remote attackers to execute arbitrary code via Transaction responses containing 1 Trans or 2 Trans2 commands, aka the "Server Message Block...

CVE-2003-1056

The CVE-2003-1056 entry concerns the ed editor on Sun Solaris 2.6, 7, and 8. It describes a local vulnerability where an attacker can create or overwrite arbitrary files through a symlink attack on temporary files, with complete confidentiality, integrity, and availability impact per CVSS. The vu...

CVE-2003-1059

Technical details for CVE-2003-1059 are not publicly provided in the supplied documents. Records give a vague description of Solaris PGX32 library vulnerability; no specifics. Monitor for updates.

CVE-2003-1057

Technical details about CVE-2003-1057 are not publicly available in the provided documents. Monitor for updates.

CVE-2003-1066

CVE-2003-1066 is a Solaris-specific vulnerability in the syslogd daemon (Solaris 2.6–9). The issue is a buffer overflow triggered by long UDP syslog packets, allowing remote attackers to cause a denial of service (syslogd crash) and potentially execute arbitrary code. Public details in the connec...

CVE-2003-1077

Technical details for CVE-2003-1077 are not publicly available in the provided documents; no affected products, vectors, or fixes are disclosed here. Monitor for updates in connected sources.

CVE-2003-1055

Buffer overflow in the nssldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup...

CVE-2003-1061

The CVE-2003-1061 entry describes a race condition in Solaris kernels (versions 2.6–9) that can allow local users to trigger a denial of service (kernel panic) via the namefs function, pipe handling, and certain STREAMS routines. OpenVAS tests point to a Solaris update for /usr/kernel/fs/namefs (...

CVE-2003-1067

Multiple buffer overflows in the 1 dbmopen function, as used in ndbm and dbm, and the 2 dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions...

CVE-2003-1062

CVE-2003-1062 affects Solaris SYSINFO(2) on SPARC 2.6–9 and x86 2.6,7,8. A local attacker can read kernel memory by exploiting a 0 variable count argument in sysinfo(2), where copyout uses a -1 argument (described as an integer underflow/overflow). The provided sources do not specify a patch vers...

CVE-2003-1079

The CVE-2003-1079 entry concerns a vulnerability in UDP RPC used by Solaris (SPARC: 2.5.1–9; x86: 2.5.1–8). The underlying issue is that certain RPC call arguments can cause excessive memory allocation, enabling remote attackers to trigger a denial of service via memory consumption. The descripti...

CVE-2003-1062

Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory...

CVE-2003-1072

CVE-2003-1072 pertains to Solaris 8 where a memory leak in the /kernel/drv/lofi driver and the /usr/sbin/lofiadm utility can be triggered by local users, leading to kernel memory consumption and potential denial of service. The OpenVAS entries reference a Solaris Update patch 114162-01 addressing...