1736 matches found
CVE-1999-1297
Affected software : cmdtool in OpenWindows 3.0 and XView 3.0 running on SunOS 4.1.4 and earlier. Vulnerability : local attackers with physical access can cause the system to display unechoed characters (e.g., password prompts) via the L2/AGAIN key. Root cause / vector : the prompt characters can ...
CVE-2001-0699
CVE-2001-0699 describes a buffer overflow in the cb_reset function of the System Service Processor (SSP) package on SunOS 5.8, enabling a local user to execute arbitrary code by supplying a long argument. The provided documents do not include a concrete mitigation, patch version, or explicit expl...
CVE-1999-1137
The permissions for the /dev/audio device on Solaris 2.2 and earlier, and SunOS 4.1.x, allow any local user to read from the device, which could be used by an attacker to monitor conversations happening near a machine that has a microphone...
CVE-1999-1318
CVE-1999-1318 affects SunOS 4.1.3 and earlier. The vulnerable component is /usr/5bin/su , which uses a search path that includes the current working directory (.). This allows local users to gain privileges via Trojan horse programs. The description clearly states a local privilege escalation and...
CVE-1999-1102
The CVE-1999-1102 entry concerns lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1 and other BSD-based systems. The vulnerability arises from a symlink-related attack in lpr that enables local users to create or overwrite arbitrary files after the program is invoked 1000 times. Root cause is a symlink hand...
CVE-1999-1197
TIOCCONS in SunOS 4.1.1 does not properly check the permissions of a user who tries to redirect console output and input, which could allow a local user to gain privileges...
CVE-1999-1197
CVE-1999-1197 affects SunOS 4.1.1 TIOCCONS. The issue is a missing or improper permission check when a user redirects console output/input, allowing a local user to gain privileges. No remediation or patch information is provided in the connected documents; exploitation details are not described.
CVE-1999-1507
Sun SunOS 4.1 through 4.1.3 allows local attackers to gain root access via insecure permissions on files and directories such as crash...
CVE-2001-0686
CVE-2001-0686 describes a buffer overflow in the mail utility included with SunOS 5.8 on x86, allowing a local user to gain privileges via a long HOME environment variable. Affected component: mail in SunOS 5.8 (x86). Root cause: buffer overflow triggered by oversized HOME value. Impact: local pr...
CVE-1999-1122
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges...
CVE-2001-1076
CVE-2001-1076 : Buffer overflow in the Solaris SunOS whodo utility (versions 5.5.1–5.8) allows local users to execute arbitrary code via overly long environment variables (SOR or CFIME). The connected documents confirm the affected platform and vulnerable component, and that exploitation is local...
sastcpd 8.0 'authprog' local root vulnerability
Hi, Several environment variable problems exist in the 'SAS Job Spawner for Open Systems version 8.00'. No other releases of the software were available to test. Sorry. authprog vulnerability ---------------------- The daemon passes a user-defined environment variable, 'authprog', to execve. This...
Buffer overflow vulnerability in action argument of dtaction
r0ar Security Advisory October 5, 2001 Buffer overflow vulnerability in action argument of dtaction Desription The dtaction utility allows applications or shell scripts, which are otherwise not connected into the CDE development environment, to invoke action requests. The action called actionname...
CVE-2001-0686
Buffer overflow in mail included with SunOS 5.8 for x86 allows a local user to gain privileges via a long HOME environment variable...
CVE-2001-0699
Buffer overflow in cbreset in the System Service Processor SSP package of SunOS 5.8 allows a local user to execute arbitrary code via a long argument...
CVE-1999-1438
CVE-1999-1438 affects SunOS 4.1.1 and earlier, with a vulnerability in the /bin/mail executable that allows local users to gain root privileges via certain command line arguments. The PT-1991-1012 entry confirms the affected software and behavior, but notes there is no information about a fix for...
CVE-1999-1467
Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user...
CVE-1999-1211
CVE-1999-1211 affects in.telnetd on SunOS 4.1.1 and earlier; local users can gain root privileges. The PT-security entry notes the issue and states there is no information about a fix for SunOS 4.1.1 and earlier in the provided documents. No explicit exploit details are given in the connected doc...
CVE-1999-1212
The CVE-1999-1212 entry concerns in.rlogind on SunOS 4.0.3 and 4.0.3c, enabling local users to gain root privileges. The PT-1991-1009 document corroborates a local privilege escalation in these SunOS versions and provides a remediation path: update to a fixed version. It does not specify the exac...