CVE-1999-1371

Buffer overflow in /usr/bin/write on Solaris 2.6 and 7 allows local privilege escalation via a long string in the terminal name argument. Exploitation details are not provided in the connected documents; remediation/fixes are not specified here.

CVE-1999-1371

Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument...

CVE-2001-0595

Buffer overflow in the kcsSUNWIOsolf.so library in Solaris 7 and 8 allows local attackers to execute arbitrary commands via the KCMSPROFILES environment variable, e.g. as demonstrated using the kcmsconfigure program...

CVE-2001-0594

kcmsconfigure as included with Solaris 7 and 8 allows a local attacker to gain additional privileges via a buffer overflow in a command line argument...

CVE-2001-0423

Buffer overflow in ipcs in Solaris 7 x86 allows local users to execute arbitrary code via a long TZ timezone environmental variable, a different vulnerability than CAN-2002-0093...

"at" is vulnerable on Solaris 7 and 8

We found that "at" in Solaris is vulnerable on Solaris 7 and 8 The kind of bug is discussed on Bugtraqid:1634 -- Generally a program that needs to display a message to the user will obtain the proper language specific string from the database using the original message as the search key and...

solaris 2.6, 7 yppasswd vulnerability

Vulnerability Report Vulnerability: Buffer overflow in yppasswd service Affects: Solaris 6, 7 SPARC tested, x86 unknown Exploit: In circulation http://www.hack.co.za/ Vendor Patch: Not yet. Various people have contacted Sun about this. No official word yet. Workarounds supplied included. Credits:...

CVE-2001-0115

The CVE describes a buffer overflow in the arp command on Solaris 7 and earlier, exploitable locally via a long -f parameter. Affected component: arp. Root cause: inadequate bounds checking in the -f option. Impact, as per the sources: complete confidentiality, integrity, and availability losses ...

CVE-2001-0115

Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter...

CVE-2001-0165

CVE-2001-0165 concerns a buffer overflow in the ximp40 shared library on Solaris 7 and Solaris 8, allowing local users to gain privileges via a long arg0 (process name) argument. Affected component: ximp40 shared library; root cause: buffer overflow. Impact: local privilege escalation with comple...

CVE-2001-0165

Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" process name argument...

Solaris mailx Vulnerability

Vulnerability in Solaris mailx1 Date Published: April 11, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris mailx1 Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The mai...

Solaris ipcs vulnerability

Solaris ipcs vulnerability Release Date: April 11, 2001 Systems Affected: Solaris 7 x86 Other versions of Solaris are most likely affected also. Discovered by: Riley Hassell [email protected] Description: We have discovered a buffer overflow in the /usr/bin/i86/ipcs utility provided with Solaris 7...

Solaris 7.0/8 - IPCS Timezone Buffer Overflow

source: https://www.securityfocus.com/bid/2581/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying from desktop to enterprise server...

Solaris 78 - kcms_configure Command-Line Buffer Overflow (2)

Solaris 78 - kcmsconfigure Command-Line Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow...

Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow if it is passed an overly long string on the command-line...

CVE-2001-0115

Buffer overflow in arp command in Solaris 7 and earlier allows local users to execute arbitrary commands via a long -f parameter...

[SPSadvisory#40]Solaris7/8 ximp40 shared library buffer overflow

SPS Advisory 40 Solaris7/8 ximp40 shared library buffer overflow UNYUN [email protected] Shadow Penguin Security http://shadowpenguin.backsection.net -------------------------------------------------------------- Date Jan. 30, 2001 Vulnerable Solaris 8 Intel & Sparc edition Solaris 7...

Solaris 7/8-beta - ARP Local Overflow

/ arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"; int mainint ac, char av char shell ...

CVE-2000-0337

CVE-2000-0337 describes a buffer overflow in the Xsun X server component of Solaris 7. The vulnerability allows local users to gain root privileges by supplying an excessively long -dev parameter. The available documents identify the affected system as Solaris 7 and the vulnerable component as th...