CVE-1999-1225

Concretely, CVE-1999-1225 affects rpc.mountd and is described in SGI IRIX advisories as allowing a remote tester to probe for the existence of files by issuing mount requests, leading to distinguishable error messages. The SGI advisory fixes this by patching/upgrading IRIX (upgrade to IRIX 6.5.23...

CVE-1999-0334

CVE-1999-0334 affects Solaris 2.2–2.3. When fsck fails at startup, a local user with physical access can obtain root privileges (root access). Root cause: startup fsck issue allowing escalation on physical access. Impact: local privilege escalation with full system compromise potential if attacke...

CVE-2003-0722

CVE-2003-0722 affects the Solaris sadmind RPC service, which ships by default with AUTH_SYS. The weakness allows remote/local attackers to spoof Solstice AdminSuite clients and gain root privileges via a sequence of RPC packets. Public details in connected sources show an in-the-wild/poised Metas...

CVE-2000-0471

CVE-2000-0471 is a Solaris vulnerability where a buffer overflow in ufsrestore during interactive extraction can allow a local user to gain root privileges via long pathnames in the dump file. The CERT page notes multiple SunOS patches (e.g., 103261-08, 103262-08, 103640-35, 105722-07, 106793-07,...

CVE-1999-0057

The CVE refers to the HP-UX vacation program allowing remote command execution by sending crafted input that causes the Vacation utility to pass arbitrary parameters to sendmail. The issue is associated with HP patch PHNE_16295 for s700/s800 11.00 (HP-UX Vacation patch), indicating the remediatio...

CVE-2004-1355

Technical details about CVE-2004-1355 are not publicly available in the provided documents; monitor for updates.

CVE-2007-3723

The CVE-2007-3723 entry concerns the Sun Solaris kernel process scheduler, which does not use the kernel’s process statistics and bases scheduling on CPU billing from periodic sampling ticks. This design allows local users to cause a denial of service through CPU consumption. The impact is descri...

CVE-1999-0568

The CVE-1999-0568 entry concerns the Solaris rpc.admind service not running in a secure mode. Connected sources identify the vulnerable component as rpc.admind on Sun Solaris, with the root cause described as the service not operating securely. The materials do not provide specific affected Solar...

CVE-2004-1180

CVE-2004-1180 affects netkit-rwho (rwhod) prior to version 0.17 on little-endian architectures. The Debian/DSA entries describe a vulnerability with missing input validation in rwhod that can be exploited remotely to crash the listening process (DoS). Debian fixes are available: 0.17-4woody2 (sta...

CVE-1999-0321

The Connected documents confirm CVE-1999-0321 describes a buffer overflow in the Solaris kcms_configure command that allows local users to gain root access. Affected software is described only as Solaris with the kcms_configure utility; specific versions and root cause details are not provided be...

CVE-1999-0795

CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...

CVE-1999-0303

CVE-1999-0303 describes a buffer overflow in the BNU UUCP daemon (uucpd) triggered by long hostnames. The issue affects the BNU UUCP daemon and is caused by improper handling of hostname lengths, with CVSS metrics indicating a local, low-complexity attack that could impact confidentiality, integr...

CVE-2005-3781

The CVE-2005-3781 issue affects Solaris 9’s in.named and is described as a denial‑of‑service via manipulation causing unnecessary queries. Connected sources identify concrete remediation: SunOS 5.9 SPARC needs patch 112970-12 and SunOS 5.9 x86 needs patch 114354-11 to address libresolv. The exact...

CVE-1999-0369

Summary: CVE-1999-0369 describes a buffer overflow in Sun’s sdtcm_convert calendar utility for OpenWindows, enabling root access. What’s affected: the Sun sdtcm_convert component used with OpenWindows; the underlying cause is a buffer overflow. Impact: local privilege escalation to root as stated...

CVE-2000-0118

The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...

CVE-2010-1183

The CVE-2010-1183 issue affects Oracle Solaris patch installation scripts used by Update Manager. A symlink vulnerability in a /tmp/CLEANUP file allows a local user to append data to arbitrary files, enabling local privilege escalation on x86 Solaris during patch updates. The Packet Storm entry d...

CVE-1999-1137

CVE-1999-1137 concerns the /dev/audio device on Solaris 2.2 and earlier and SunOS 4.1.x. Permissions allow any local user to read the device, enabling potential eavesdropping on nearby conversations. Root cause: permissive read access to the audio device; affected components are the legacy Solari...

CVE-2001-1066

The CVE-2001-1066 issue affects the Netscape 6.0.1 installation script on Solaris (and related versions) where the installer creates a temporary, predictably named file in a world-writable /tmp directory without proper existence/ownership checks. This enables a local attacker to perform a symlink...