CVE-2001-0554

The BSD-based telnetd telnet daemon is vulnerable to a buffer overflow across various operating systems. The root cause is the improper handling of a set of options, specifically AYT (Are You There) , by the telrcv function . This flaw allows remote attackers to execute arbitrary commands . While...

CVE-1999-0502

CVE-1999-0502 describes a general security vulnerability where a Unix account or other network device account is configured with a default, null, blank, or missing password . This allows an attacker to gain unauthorized access to the system. Various scanner modules identify this issue across diff...

CVE-1999-0024

CVE-1999-0024 describes a DNS cache-poisoning flaw in BIND caused by predictable DNS query IDs. The connected sources consistently state DNS cache poisoning via BIND, with related discussions in Red Hat/Security advisories and CERT context. The materials do not provide a concrete patch version or...

CVE-2005-3398

CVE-2005-3398 relates to the Solaris Management Console web server in Solaris 8/9/10 where the HTTP TRACE method is enabled by default. The effect is potential cross-site tracing information leakage (e.g., cookies or headers) through TRACE requests. Connected docs confirm the TRACE issue as a rec...

CVE-2003-0201

A buffer overflow vulnerability exists in the call_trans2open function within trans2.c for Samba and Samba-TNG . Affected versions include Samba 2.2.x (before 2.2.8a), 2.0.10 and earlier 2.0.x , and Samba-TNG before 0.3.2. Remote attackers can exploit this vulnerability to execute arbitrary code ...

CVE-2001-0797

A buffer overflow vulnerability exists in the System V derived /bin/login program across various operating systems, including Solaris/SunOS, HP-UX, AIX, IRIX, and Unixware . The root cause is the improper handling of a large number of extraneous arguments or environment variables . This allows re...

CVE-2004-1082

CVE-2004-1082 affects Apache 1.3.31 and 1.3.32 on Mac OS X Server. The vulnerability arises in mod_digest_apple where the server does not properly verify the nonce in a client response, allowing remote attackers to replay credentials. The NVD entry (CVSS v2 base score 7.5, HIGH) indicates a netwo...

CVE-1999-0038

CVE-1999-0038 describes a buffer overflow in the xlock program that allows local users to execute commands as root. The connected sources (Red Hat CVE entry, PT Security listing, and multiple feeds) corroborate a local-privilege escalation due to a buffer overflow in xlock, but the documents do n...

CVE-2003-0466

CVE-2003-0466 affects wu-ftpd: an off-by-one bug in fb_realpath() can trigger a buffer overflow, potentially enabling a remote attacker to execute code and obtain root privileges on affected wu-ftpd versions (up to 2.6.2). The issue is demonstrated via pathnames of length MAXPATHLEN+1 and FTP com...

CVE-1999-0513

CVE-1999-0513 describes a vulnerability where ICMP messages to broadcast addresses are allowed, enabling a Smurf attack that can cause a denial of service. The primary sources (NVD, Red Hat, and CVE listings) consistently state that the issue involves ICMP traffic to broadcast addresses, resultin...

CVE-1999-0097

The CVE-1999-0097 entry concerns the AIX FTP client, where a malicious FTP server can force execution of shell commands on the client via metacharacters (for example, a pipe). The issue is documented across multiple sources (NVD, CVE list) and is consistent with historical CERT/Red Hat advisories...

CVE-1999-0186

The CVE-1999-0186 entry concerns Solaris where an SNMP subagent uses a default community string, enabling remote attackers to execute arbitrary commands as root or modify system parameters. The NVD record shows a base score of 10.0 (HIGH) with Network attack vector, low complexity, and complete i...

CVE-2002-0573

CVE-2002-0573 affects Solaris systems running the rpc.rwalld daemon (Solaris 2.5.1–8). The issue is a format-string vulnerability in the error-handling path of rpc.rwalld, which can allow a remote attacker to execute arbitrary code with the daemon’s privileges (typically root) by sending a specia...

CVE-2004-0790

CVE-2004-0790 describes a denial-of-service condition caused by spoofed ICMP error messages that disrupt TCP connections. In published connected materials, the vulnerability is tied to BIG-IP products, notably FastL4 accelerated virtual servers on ePVA-equipped platforms (e.g., VIPRION blades and...

CVE-1999-0003

CVE-1999-0003: A buffer overflow in the ToolTalk database server (rpc.ttdbserverd) may allow an attacker to execute arbitrary commands as root. Affected component is ToolTalk’s object database server; exploitation would require access to the vulnerable service. In the provided references, the imp...

CVE-2003-0196

CVE-2003-0196 corresponds to multiple buffer overflows in Samba before 2.2.8a, enabling remote code execution or denial of service. The related CVE-2003-0201 describes a trans2open overflow; exploitation has been demonstrated in various Samba builds (2.2.0–2.2.8) across platforms (Linux, macOS, B...

CVE-2002-0391

CVE-2002-0391 describes an integer overflow in the xdr_array function of RPC servers using libc/glibc or SunRPC-based code (e.g., dietlibc), enabling remote code execution by passing a large number of RPC arguments. The OpenVAS/DSA entries show Debian advisories addressing this issue across multi...

CVE-2003-0694

The Sendmail 8.12.9 mail transfer agent is vulnerable to a remote code execution (RCE) flaw via a buffer overflow in the prescan function. This vulnerability is specifically triggered through the parseaddr function within the parseaddr.c file. Attackers can exploit this to execute arbitrary code ...

CVE-2003-0028

Technical details about CVE-2003-0028 are not present in the provided documents. The connected sources reference the CVE in Debian/OpenVAS advisories but do not specify affected products, root cause, versions, impact, or fixes.

CVE-1999-0008

CVE-1999-0008: A buffer overflow in Sun NIS+ rpc.nisd (the remote RPC service 100300/nisd) allows a remote attacker to gain a root shell on the affected host. Multiple connected sources (OpenVAS/Nessus) describe it as a remote, network-exposed overflow with a base CVSS v2 score of 10.0 and full i...

CVE-2003-0161

Technical details for CVE-2003-0161 are not publicly provided in the supplied documents; monitor for updates from the connected advisories and feeds.

CVE-2001-0236

The snmpXdmid SNMP to DMI mapper daemon in SunOS 5.7 / Solaris 7 and SunOS 5.8 / Solaris 8 is vulnerable to a buffer overflow (specifically a heap overflow). A remote attacker can execute arbitrary commands by sending a specially crafted, long indication event that is translated into an SNMP trap...

CVE-2003-1063

The CVE-2003-1063 entry concerns Solaris 2.6/7 cachefs patches (105693-13, 108800-02, 105694-13, 108801-02) that overwrite inetd.conf. This may silently reenable services and allow remote attackers to bypass the intended security policy. Affected component: cachefs daemon on Solaris; root cause: ...

CVE-2006-0745

The CVE concerns the X.Org X Server (xorg-server) 1.0.0 and later (X11R6.9.0, X11R7.0) where a faulty check tests the address of geteuid instead of the function result, allowing a local user to bypass restrictions and perform a Local Privilege Escalation. Impact described across sources: an unpri...

CVE-1999-0165

Technical details about CVE-1999-0165 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are specified. Monitor for updates from vendors and CVE sources.

CVE-2000-0844

The connected records confirm CVE-2000-0844 affects Unix locale subsystem functions that fail to cleanse user-supplied format strings, enabling local attackers to execute arbitrary commands through gettext, catopen, and related calls. The root cause is improper sanitization of format strings in l...

CVE-2002-1317

The CVE-2002-1317 flaw affects the Solaris X Window Font Server (XFS) daemon fs.auto, where the Dispatch() function handles XFS queries. This remotely exploitable buffer overflow can allow an attacker to crash the service or execute arbitrary code with the fs.auto/Font Server privileges (typicall...

CVE-2008-5684

CVE-2008-5684 affects Sun Solaris 8–10 and OpenSolaris before snv_85 due to a libICE issue; allows context-dependent denial of service, shown by a port-scan-triggered segmentation fault in gnome-session. Connected docs reference Xsun/X11 patches for Solaris 10, but explicit libICE remediation det...

CVE-1999-0009

Summary of CVE-1999-0009 from connected documents : The issue is an inverse query buffer overflow in BIND releases 4.9 and 8. The Red Hat entry mirrors the description: the vulnerability is an inverse query buffer overflow in BIND 4.9 and 8 releases. Tenable/Nessus references indicate this is a r...

CVE-2005-0109

Technical details for CVE-2005-0109 are not provided in the supplied documents. The set includes historical references and later OpenSSL advisories, but no specific product, root cause, impact, or fix details here. Monitor for updates.

CVE-2004-0791

CVE-2004-0791 covers a denial-of-service scenario where multiple TCP/IP and ICMP implementations can be disrupted by a blind throughput-reduction attack using spoofed Source Quench packets. The CVE is discussed across connected advisories; notably, F5 David advisories show that for BIG-IP product...

CVE-1999-0254

CVE-1999-0254 relates to HP OpenView and describes a hidden SNMP community string vulnerability. A remote attacker could exploit this via SNMP to modify MIB tables and obtain sensitive information, with network access and no authentication required. The NVD entry records a CVSSv2 base score of 10...

CVE-2004-0496

The CVE-2004-0496 entry refers to multiple local vulnerabilities in the Linux kernel 2.6, distinct from CVE-2004-0495, discovered via Sparse. Connected sources (Gentoo GLSA advisories GLSA-200407-02 and GLSA-200407-16, OpenVAS NASLs, and NVD/NVD-style listings) corroborate that CAN-2004-0496 conc...

CVE-2008-5133

The connected CVE-2008-5133 entry describes Solaris SunOS/OpenSolaris ipnat/IPFilter behavior: on NAT-enabled DNS servers, it improperly alters the source port of a packet when the destination port is DNS, allowing remote attackers to spoof DNS responses and bypass the CVE-2008-1447 protection me...

CVE-1999-0833

CVE-1999-0833 describes a buffer overflow in BIND 8.2 when processing NXT records. The vulnerability arises in the rrextract logic for NXT processing, where the dlen/n/cp1 handling can be coerced to overflow the destination, enabling remote code execution with the privileges of the named process....

CVE-2002-0677

The CVE-2002-0677 entry affects the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/Core/CORE documentation confirms the vulnerability: an attacker can exploit improper range checking on the AUTH_UNIX file descriptor argument passed to _TT_ISCLOSE, using it as an index into a 128-...

CVE-1999-0189

Solaris rpcbind exposes the RPC portmapper on a non-standard high UDP port in addition to the expected port 111. This port discovery can enable attackers to bypass basic firewall rules by querying the portmapper for the port numbers of RPC services. The issue is documented across multiple sources...

CVE-2003-0914

CVE-2003-0914 affects ISC BIND 8.3.x before 8.3.7 and 8.4.x before 8.4.3. A remote attacker can poison the DNS cache by using a malicious nameserver that returns negative responses with a large TTL, causing legitimate queries to be answered with cached negative results. Remediation mentioned in t...

CVE-2006-5201

CVE-2006-5201 affects Sun Solaris components (notably NSS, NSS-based libraries, Java JDK/JRE, JSSE, IPSec/IKE, and related Sun products). The root cause is when using an RSA key with exponent 3 that removes PKCS #1 padding prior to hash generation, enabling remote attackers to forge a PKCS #1 v1....

CVE-1999-0022

CVE-1999-0022 is supported by connected records indicating a local privilege escalation in rdist through a buffer overflow in the expstr() function, enabling a local user to gain root privileges. The affected software is rdist and the vulnerable component is the expstr() function. The provided ma...

CVE-2004-0523

CVE-2004-0523 relates to MIT Kerberos 5 (krb5) 1.3.3 and earlier, where multiple buffer overflows in krb5_aname_to_localname allow a remote attacker to execute arbitrary code as root. Public details describe the vulnerability, its impact, and vendor responses. Affected products include MIT Kerber...

CVE-2007-3471

CVE-2007-3471 describes a buffer overflow in the dtsession component of the Sun Solaris CDE Session Manager affecting Solaris 8–10. Connected Nessus patches for Solaris 10 (x86 and SPARC) show remediation via Sun patching: 125279-09/ -07 and 125280-07/ -10, with patches 125279-10 or higher and 12...

CVE-1999-0018

CVE-1999-0018 describes a buffer overflow in statd that permits root privileges . The vulnerability is consistently reported across Red Hat, CVE, NVD sources, describing the same impact. The provided documents do not specify affected OS versions, product families, or exact vulnerable components b...

CVE-2001-1503

Vulnerability: The finger daemon (in.fingerd) in Sun Solaris 2.5–8 and SunOS 5.5–5.8 allows remote attackers to list all user accounts by sending a crafted finger request (e.g., finger 'a b c d e f g h'@host). Affects multiple Solaris releases; impact is limited to information disclosure of accou...

CVE-2009-2283

CVE-2009-2283 : The Sun Java Web Console 3.0.2–3.0.5 (Sun Solaris 10) contains multiple XSS vulnerabilities in the help jsp scripts (e.g., helpwindow.jsp, masthead.jsp). An attacker could inject arbitrary HTML/script in the user’s browser session. The vectors are not specified in the provided doc...

CVE-1999-0125

CVE-1999-0125 describes a local buffer overflow in the SGI IRIX mailx program. The vulnerability affects the mailx component of SGI IRIX; the root cause is a buffer overflow that can impact confidentiality, integrity and availability (partial impacts) when an attacker with local access and no aut...

CVE-1999-0977

The CVE-1999-0977 entry describes a buffer overflow in the Solaris sadmind daemon (including AdminSuite components) that can be triggered remotely via a NETMGT_PROC_SERVICE request, potentially allowing arbitrary code execution with root privileges. Affected systems run Solaris/SunOS with sadmind...

CVE-2007-5365

CVE-2007-5365 : OpenBSD 4.0–4.2 dhcpd and similar ISC dhcp-2 based implementations suffer a stack-based buffer overflow in cons_options (options.c) that can allow remote attackers to execute code or cause daemon crashes by sending a DHCP request with a max message size smaller than the minimum IP...

CVE-2000-0337

CVE-2000-0337 describes a buffer overflow in the Xsun X server component of Solaris 7. The vulnerability allows local users to gain root privileges by supplying an excessively long -dev parameter. The available documents identify the affected system as Solaris 7 and the vulnerable component as th...

CVE-2001-0594

CVE-2001-0594 affects Solaris 7/8 where kcms_configure is vulnerable to a local privilege escalation caused by a buffer overflow in a command line argument. Root cause: buffer overflow in kcms_configure. Impact: partial confidentiality, integrity, and availability (per NVD). Remediation: apply So...