1736 matches found
CVE-1999-0302
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server...
CVE-1999-0185
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution...
CVE-1999-0217
CVE-1999-0217 affects SunOS 4.1.3 where malicious UDP option settings can force a reboot. Connected documents reaffirm SunOS 4.1.3 as the affected software and describe the root cause as malicious UDP option handling. There is no explicit information in the provided documents about a fixed versio...
CVE-1999-0185
The CVE-1999-0185 entry concerns SunOS/Solaris where a remote user could leverage an FTP server’s data port to connect to an rlogin server on a host that trusts the FTP server, enabling remote command execution. The vulnerability arises from an insecure trust relationship between the FTP data pat...
CVE-1999-0167
In SunOS, NFS file handles could be guessed, giving unauthorized access to the exported file system...
CVE-1999-0320
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files...
CVE-1999-0320
CVE-1999-0320 affects SunOS where the rpc.cmsd service is able to overwrite arbitrary files, enabling an attacker to obtain root access. The vulnerability is described as a remote, unauthenticated issue with high impact (COMPLETE confidentiality, integrity, and availability impacts) and a CVSS v2...
CVE-1999-0301
Buffer overflow in SunOS/Solaris ps command...
CVE-1999-0217
Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems...
DIGITAL UNIX 4.0 d/f / AIX 4.3.2 / CDE 2.1 / IRIX 6.5.14 / Solaris 7.0 / SunOS 4.1.4 - Local Buffer Overflow
/ source: https://www.securityfocus.com/bid/641/info TRU64/DIGITAL UNIX 4.0 d/f,AIX Somehow the overflow is very sensitive to caching of the stack. To see that it really does work, run it in a debugger and set a break point in ttopen when that is reached, set a breakpoint in sscanf and continue...
sun.5.6.lpset.txt
Date: Tue, 11 May 1999 11:43:46 +0900 From: kim yong-jun homepage=ce.hannam.ac.kr/s96192 To: [email protected] Subject: SunOS 5.6 X86 lpset vulnerability This is my second post to ButTraq. If this is old, I'm sorry. It's buffer overflow in "/usr/bin/lpset". View this command : loveyou@/ %...
solaris.5.7.mount.suid.txt
Date: Mon, 10 May 1999 09:14:12 +0200 From: Jonas Stahre To: [email protected] Subject: SunOS 5.7 rmmount, no nosuid. The man-page for rmmount under SunOS 5.7 says: File systems mounted by rmmount are always mounted with the nosuid flag set, thereby disabling set-uid programs and access to blo...
sunhack.sh
=========================================================================== 8lgm-Advisory-5.UNIX.mail.24-Jan-1992 PROGRAM: binmail1 /usr/bin/mail VULNERABLE OS's: SunOS 4.1.x Possibly other platforms - see DISCUSSION DESCRIPTION: A race condition exists in binmail1, which allows files to be creat...
CVE-1999-0370
In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files...
CVE-1999-0302
SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server...
CVE-1999-1297
cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters such as those from password prompts via the L2/AGAIN key...
CVE-1999-0320
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files...
CVE-1999-0185
In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution...