CVE-1999-0056

Buffer overflow in Sun's ping program can give root access to local users...

CVE-1999-0369

The Sun sdtcmconvert calendar utility for OpenWindows has a buffer overflow which can gain root access...

CVE-1999-0120

Sun/Solaris utmp file allows local users to gain root access if it is writable by users other than root...

sun_bof.txt

Subject: Sun Security Bulletin 00189 fwd To: [email protected] -- Kis-Szabo Andras Technical University of Budapest -----------------------------/ Schonherz Zoltan Dormitory [email protected] /-------------------------------3OO---.Info Fingerprint = 97 D7 32 CE F9 74 5C A0 E5 F4 09 29 67 9...

[SECURITY] New versions of man2html fixes postinst glitch

Former versions of man2html uses a static file in /tmp for writing. This can lead into overwriting system files if a malicious user has created a symbolic link to it before upgrading man2html. We recommend you upgrade your man2html package as soon as possible. wget url will fetch the file for you...

solaris.7.procfs.dos.txt

Date: Tue, 9 Mar 1999 22:17:19 +0200 From: Toomas Soome To: [email protected] Subject: 64 bit Solaris 7 procfs bug hi! there is bug with 64 bit solaris 7 procfs, every nonprivileged user can crash computer with command 'more /proc/self/psinfo'. Tested with UE3000, U10, UE450. This bug has been...

sunsolve.database.txt

Date: Tue, 11 May 1999 19:22:59 +0100 From: "Robson, Ken" To: [email protected] Subject: Sun Microsystems Leaks extensive Amounts of Information About Itself & It's Customers Through Its Sunsolve Database... Hi Folks, I have just been scouring Sun's Bug Reports for some information and I...

sun-snmp.txt

Vulnerabilities in Sun Solaris 2.6 SNMP Jeremy Rauch April 1998 Sun's snmpd implementation as supplied with Solaris 2.6 includes what used to be shipped with Sun's Solstice Admin suite as it's snmpd, and associated subagents. Sun's snmpd is actually pretty interesting, in that it supports a numbe...

sun.cc.compiler.txt

Date: Tue, 15 Jun 1999 00:17:12 +1000 From: Darren Reed To: [email protected] Subject: big brother in your cc Whilst this isn't strictly speaking a security bug, it borders on Sun acting in a very "big brother" manner which is frightening! For those of you using Sun's SUNWspro C compiler...

cop-01.txt

January 3, 1999 Corruptio Optimi Pessima "corruption of the best is worst of all" Vulnerability: Automountd Operating System: SUN Solaris Versions affected: 2.5, 2.5.1, 2.6, 2.7 X86 and SPARC architectures Rant -------------------------------------------------------------- ---- You pay for this?...

rpc.statd.automountd.bounce.txt

Date: Mon, 7 Jun 1999 11:29:55 -0700 From: Sun Security Coordination Team To: [email protected] Subject: Sun Security Bulletin 00186 -----BEGIN PGP SIGNED MESSAGE----- Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00186 Date: June 7, 1999 Cross-Ref: Title: rpc.statd The informatio...

sun.sendmail.security.txt

Date: Mon, 7 Jun 1999 13:56:23 -0700 From: Sun Security Coordination Team To: [email protected] Subject: Sun Security Bulletin 00187 -----BEGIN PGP SIGNED MESSAGE----- Sun Microsystems, Inc. Security Bulletin Bulletin Number: 00187 Date: June 7, 1999 Cross-Ref: Title: Version 8.8.8 Sendmail f...

sun.useradd.expir.date.txt

Date: Thu, 10 Jun 1999 11:16:32 -0500 From: Chad Price To: [email protected] Subject: Sun Useradd program expiration date bug This has been tested and verified only on Solaris 7. Sun has provided a useradd binary as well as the gui admintool for adding new users. This program it's a binary in...

Caldera OpenUnix 8.0UnixWare 7.1.1 HP HP-UX 11.0 Solaris 7.0 SunOS 4.1.4 - rpc.cmsd Buffer Overflow (1)

Caldera OpenUnix 8.0UnixWare 7.1.1 HP HP-UX 11.0 Solaris 7.0 SunOS 4.1.4 - rpc.cmsd Buffer Overflow 1 // source: https://www.securityfocus.com/bid/524/info There is a remotely exploitable buffer overflow vulnerability in rpc.cmsd which ships with Sun's Solaris and HP-UX versions 10.20, 10.30 and...

CVE-1999-1478

The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the character...

Subject: [SECURITY] New version of kernel-image for sparc fixes DoS attack

As is widely known by now the Linux 2.2.x kernels had a problem with parsing IP options, which made them susceptible to a DoS attack. The Debian GNU/Linux 2.1 release for the Sun sparc architecture uses such a kernel. If you are using such a system and havent upgraded the kernel yourself, we...

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying

Sun Solaris 2.5.1 - rpc.statd rpc Call Relaying // source: https://www.securityfocus.com/bid/450/info The rpc service rpc.statd, shipped with all major versions of Sun's solaris, is the status monitoring service for NFS file locking. The vulnerability lies in rpc.statd's ability to relay rpc call...

IBM AIX 4.2.1 Sun Solaris 7.0 - LC_MESSAGES libc Buffer Overflow (3)

IBM AIX 4.2.1 Sun Solaris 7.0 - LCMESSAGES libc Buffer Overflow 3 / source: https://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges...

IBM AIX 4.2.1 Sun Solaris 7.0 - LC_MESSAGES libc Buffer Overflow (2)

IBM AIX 4.2.1 Sun Solaris 7.0 - LCMESSAGES libc Buffer Overflow 2 // source: https://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges...

IBM AIX 4.2.1 / Sun Solaris 7.0 - LC_MESSAGES libc Buffer Overflow (4)

// source: https://www.securityfocus.com/bid/268/info A buffer overflow in libc's handling of the LCMESSAGES environment variable allows a malicious user to exploit any suid root program linked agains libc to obtain root privileges. This problem is found in both IBM's AIX and Sun Microsystem's...