CVE-2001-0470

CVE-2001-0470 describes a buffer overflow in the Solaris 8 SNMP proxy agent snmpd triggered by a long argv[0], allowing local users to gain root privileges. The issue is component-level: the vulnerable code path is within snmpd’s handling of the process name. Reported impact is local privilege es...

CVE-2001-0421

The CVE-2001-0421 issue affects the Solaris FTP server (Solaris 8 and earlier). The vulnerability arises when an authenticated/invalid password sequence is followed by a CWD ~ command, which can trigger a core dump in the root directory and may lead to leaking sensitive data (e.g., shadowed passw...

CVE-2001-0401

CVE-2001-0401 involves a buffer overflow in the Solaris tip tool on Solaris 8 and earlier. The overflow is triggered by a long HOME environment variable, allowing local users to execute arbitrary commands. The core details provided indicate the affected component is the tip program, with the root...

CVE-2001-0249

CVE-2001-0249 is a heap overflow issue in the Solaris 8 FTP daemon caused by the glob command handling. The vulnerability allows a remote attacker to execute arbitrary code by supplying a long pathname via FTP LIST, which triggers unbounded string operations during glob expansion. OpenVAS materia...

CVE-2001-0470

Buffer overflow in SNMP proxy agent snmpd in Solaris 8 may allow local users to gain root privileges by calling snmpd with a long program name...

PT-2001-1478 · Oracle · Solaris

Name of the Vulnerable Software and Affected Versions: Solaris 8 Description: The issue is related to a heap overflow in the FTP daemon, which allows remote attackers to execute arbitrary commands. This is achieved by creating a long pathname and calling the LIST command, which utilizes glob to...

CVE-2001-0165

CVE-2001-0165 concerns a buffer overflow in the ximp40 shared library on Solaris 7 and Solaris 8, allowing local users to gain privileges via a long arg0 (process name) argument. Affected component: ximp40 shared library; root cause: buffer overflow. Impact: local privilege escalation with comple...

CVE-2001-0165

Buffer overflow in ximp40 shared library in Solaris 7 and Solaris 8 allows local users to gain privileges via a long "arg0" process name argument...

CVE-2001-0269

pamldap authentication module in Solaris 8 allows remote attackers to bypass authentication via a NULL password...

Solaris mailx Vulnerability

Vulnerability in Solaris mailx1 Date Published: April 11, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris mailx1 Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes Vulnerability Description: The mai...

Solaris 7.0/8 - IPCS Timezone Buffer Overflow

source: https://www.securityfocus.com/bid/2581/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying from desktop to enterprise server...

Solaris 78 - kcms_configure Command-Line Buffer Overflow (2)

Solaris 78 - kcmsconfigure Command-Line Buffer Overflow 2 // source: https://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow...

Solaris 7/8 - 'kcms_configure' Command-Line Buffer Overflow (2)

// source: https://www.securityfocus.com/bid/2558/info The Kodak Color Management System, or KCMS, is a package that ships with workstation installations of Solaris 7 and 8. kcmsconfigure, a part of KCMS, is vulnerable to a buffer overflow if it is passed an overly long string on the command-line...

Solaris 8 pam_ldap.so.1 module broken

I looked through the archives back to November 2000 and didn't see this mentioned. Apologies if it's there and I missed it. Sunsolve has bugid 4384816 on file regarding this issue. It's been known since 06-Nov-2000 with a status of 'Evaluated' but no workaround or other information, helpful or...

[SPSadvisory#40]Solaris7/8 ximp40 shared library buffer overflow

SPS Advisory 40 Solaris7/8 ximp40 shared library buffer overflow UNYUN [email protected] Shadow Penguin Security http://shadowpenguin.backsection.net -------------------------------------------------------------- Date Jan. 30, 2001 Vulnerable Solaris 8 Intel & Sparc edition Solaris 7...

Solaris 7/8-beta - ARP Local Overflow

/ arp overflow proof of concept by [email protected] shellcode originally written by Cheez Whiz. tested on x86 solaris 7,8beta default should work. if not, arg1 = offset. +- by 100's Copyright Security-Focus.com, 11/2000 / long getesp asm"movl %esp,%eax"; int mainint ac, char av char shell ...

CVE-2000-0471

CVE-2000-0471 is a Solaris vulnerability where a buffer overflow in ufsrestore during interactive extraction can allow a local user to gain root privileges via long pathnames in the dump file. The CERT page notes multiple SunOS patches (e.g., 103261-08, 103262-08, 103640-35, 105722-07, 106793-07,...

CVE-2000-0471

Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname...

CVE-2000-0471

Buffer overflow in ufsrestore in Solaris 8 and earlier allows local users to gain root privileges via a long pathname...

Solaris x86 Xsun overflow.

There exists an overflow in /usr/openwin/bin/Xsun setuid root program on solaris 7 x86 version, I'm not sure about sol 8. This bug was discovered and exploited sometime in '98. The program comes default setgid root on the sparc version of solaris. I haven't checked wether this is exploitable on...