1736 matches found
CVE-1999-1467
The CVE-1999-1467 issue affects the rcp service on SunOS 4.0.x. The underlying problem is tied to the configuration of the nobody user, enabling remote attackers from trusted hosts to execute arbitrary commands as root. The connected PT-1989-1001 entry confirms SunOS 4.0.x as the affected platfor...
CVE-1999-1449
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service kernel panic by reading from the /dev/tcx0 TCX device...
CVE-1999-1449
CVE-1999-1449 affects SunOS 4.1.4 on a SPARC/Sparc 20. The vulnerability is triggered by reading from the /dev/tcx0 TCX device, leading to a kernel panic (denial of service). The available data specifies a local attack vector with low ease of exploitation and partial impact to availability, and t...
CVE-1999-1388
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument...
CVE-1999-1388
The CVE-1999-1388 entry concerns SunOS 4.1.x, where the passwd utility is vulnerable to a local symlink attack via the -F command line argument. This allows local users to overwrite arbitrary files, due to the underlying symlink race condition in passwd. The affected component is the passwd progr...
CVE-1999-1396
Vulnerability in integer multiplication emulation code on SPARC architectures for SunOS 4.1 through 4.1.2 allows local users to gain root access or cause a denial of service crash...
CVE-1999-1212
Vulnerability in in.rlogind in SunOS 4.0.3 and 4.0.3c allows local users to gain root privileges...
CVE-1999-1211
CVE-1999-1211 affects in.telnetd on SunOS 4.1.1 and earlier; local users can gain root privileges. The PT-security entry notes the issue and states there is no information about a fix for SunOS 4.1.1 and earlier in the provided documents. No explicit exploit details are given in the connected doc...
CVE-1999-1506
Vulnerability in SMI Sendmail 4.0 and earlier, on SunOS up to 4.0.3, allows remote attackers to access user bin...
CVE-1999-1396
The CVE-1999-1396 entry concerns SunOS 4.1–4.1.2 on SPARC where the integer multiplication emulation code is vulnerable. Local users could gain root privileges or trigger a denial of service (crash) due to the described flaw. Public references exist (e.g., CERT advisory CA-1992-15, SecurityFocus ...
CVE-1999-1506
The CVE-1999-1506 entry affects SMI Sendmail versions 4.0 and earlier on SunOS up to 4.0.3. The vulnerability allows remote attackers to access user bin, indicating an unauthorized access flaw in the Sendmail implementation. The connected PT-1990-1008 entry confirms the exact affected software an...
CVE-2001-1076
Buffer overflow in whodo in Solaris SunOS 5.5.1 through 5.8 allows local users to execute arbitrary code via a long 1 SOR or 2 CFIME environment variable...
Solaris /opt/SUNWssp/bin/cb_reset Vulnerability
Vulnerability in Solaris /opt/SUNWssp/bin/cbreset Date Published: June 12, 2001 Advisory ID: N/A Bugtraq ID: N/A CVE CAN: Non currently assigned. Title: Solaris /opt/SUNWssp/bin/cbreset Buffer Overflow Vulnerability Class: Boundary Error Condition Remotely Exploitable: No Locally Exploitable: Yes...
Переполнение буфера в mail из SunOS (buffer overflow)
Переполнение убфера при копировании переменной HOME дает egid mail...
$HOME buffer overflow in SunOS 5.8 x86
Georgi Guninski security advisory 46, 2001 $HOME buffer overflow in SunOS 5.8 x86 Systems affected: SunOS 5.8 x86 have not tested on other OSes Risk: Medium Date: 4 June 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodified. You may not modify it a...
sunhome.txt
[email protected] Georgi Guninski security advisory 46, 2001 $HOME buffer overflow in SunOS 5.8 x86 Systems affected: SunOS 5.8 x86 have not tested on other OSes Risk: Medium Date: 4 June 2001 Legal Notice: This Advisory is Copyright c 2001 Georgi Guninski. You may distribute it unmodified. Y...
HP OpenView NNM v6.1 buffer overflow
HP OpenView NNM v6.1 buffer overflow The problem.. HP OpenView NNM v6.1 has a buffer overflow in the suid-root file ecsd located in the /opt/OV/bin/ directory. ecsd is not used in NNM, but is shipped and installed suid-root as default. Details.. je@openview uname -a SunOS openview 5.8...
Solaris ufsrestore buffer overflow in command pathname parameters for interactive session
Overview There is a buffer overflow in ufsrestore, a file restoration utility. Description When operating in interactive mode, the pathname parameter of the extract command is not properly bounds checked. When used in conjunction with long pathnames contained in the dump file, an internal buffer...
[ Hackerslab bug_paper ] SunOS application perfmon vulnerability
============================================================================== Hackerslab bugpaper SunOS application perfmon vulnerability ============================================================================== File : /opt/JSParm/bin/perfmon SYSTEM : Solaris 2.X INFO : parm is a program th...