561 matches found
CVE-1999-0833
CVE-1999-0833 describes a buffer overflow in BIND 8.2 when processing NXT records. The vulnerability arises in the rrextract logic for NXT processing, where the dlen/n/cp1 handling can be coerced to overflow the destination, enabling remote code execution with the privileges of the named process....
CVE-2005-0488
CVE-2005-0488 affects certain BSD-based Telnet clients (including those on Solaris and SuSE Linux). The issue allows a remote attacker to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command. The connected documents confirm the vulnerability description ...
CVE-1999-0018
CVE-1999-0018 describes a buffer overflow in statd that permits root privileges . The vulnerability is consistently reported across Red Hat, CVE, NVD sources, describing the same impact. The provided documents do not specify affected OS versions, product families, or exact vulnerable components b...
CVE-1999-0069
This CVE tracks a buffer overflow in the Solaris ufsrestore component. Affected software: Solaris ufsrestore. Root cause: a buffer overflow vulnerability in the ufsrestore utility. Impact: as per CVSS, local attack vector with low complexity could lead to complete compromise of confidentiality, i...
CVE-1999-0143
Technical details (affected software/versions, root cause, impact) are not publicly provided in the connected documents; monitor for updates.
CVE-2004-0523
CVE-2004-0523 relates to MIT Kerberos 5 (krb5) 1.3.3 and earlier, where multiple buffer overflows in krb5_aname_to_localname allow a remote attacker to execute arbitrary code as root. Public details describe the vulnerability, its impact, and vendor responses. Affected products include MIT Kerber...
CVE-2002-0677
The CVE-2002-0677 entry affects the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/Core/CORE documentation confirms the vulnerability: an attacker can exploit improper range checking on the AUTH_UNIX file descriptor argument passed to _TT_ISCLOSE, using it as an index into a 128-...
CVE-2006-5201
CVE-2006-5201 affects Sun Solaris components (notably NSS, NSS-based libraries, Java JDK/JRE, JSSE, IPSec/IKE, and related Sun products). The root cause is when using an RSA key with exponent 3 that removes PKCS #1 padding prior to hash generation, enabling remote attackers to forge a PKCS #1 v1....
CVE-1999-0104
Technical details about CVE-1999-0104 are not publicly provided in the supplied documents; affected products, impact specifics, and remediation are not disclosed. Monitor for updates.
CVE-2001-0095
Catman in Solaris 2.7/2.8 creates insecure temporary files with predictable names in world-writable /tmp, enabling local users to perform a symlink attack to overwrite arbitrary files. The root cause is predictable temp-file naming and symlink handling when run as root. Impact is local privilege ...
CVE-2012-4285
Wireshark vulnerability CVE-2012-4285 affects the DCP ETSI dissector: in Wireshark 1.4.x < 1.4.15, 1.6.x < 1.6.10, and 1.8.x
CVE-2012-4289
CVE-2012-4289 affects Wireshark’s AFP dissector. In Wireshark 1.4.x < 1.4.15, 1.6.x < 1.6.10, and 1.8.x
CVE-1999-0209
CVE-1999-0209 concerns SunView (SunTools) selection_svc; connected sources document a broader, concrete detail: Solaris SunRPC ypupdated RPC service vulnerable to remote command execution via MAP UPDATE handling, permitting command injection (shell) and potentially root-level execution on affecte...
CVE-2009-0873
CVE-2009-0873 affects Sun Solaris 10 and OpenSolaris before snv_106, where the NFS daemon (nfsd) under NFSv3 mishandles combinations of security modes, allowing remote attackers to bypass access controls and read or modify protected files by abusing incompatible sec=sys and sec=krb5 configuration...
CVE-1999-0977
The CVE-1999-0977 entry describes a buffer overflow in the Solaris sadmind daemon (including AdminSuite components) that can be triggered remotely via a NETMGT_PROC_SERVICE request, potentially allowing arbitrary code execution with root privileges. Affected systems run Solaris/SunOS with sadmind...
CVE-1999-0125
CVE-1999-0125 describes a local buffer overflow in the SGI IRIX mailx program. The vulnerability affects the mailx component of SGI IRIX; the root cause is a buffer overflow that can impact confidentiality, integrity and availability (partial impacts) when an attacker with local access and no aut...
CVE-1999-0168
CVE-1999-0168 describes a vulnerability in the RPC portmapper where it may act as a proxy and redirect service requests, making them appear to originate from localhost. This can bypass authentication and allow NFS mounts through the portmapper despite export restrictions. Documented sources (Red ...
CVE-2001-1503
Vulnerability: The finger daemon (in.fingerd) in Sun Solaris 2.5–8 and SunOS 5.5–5.8 allows remote attackers to list all user accounts by sending a crafted finger request (e.g., finger 'a b c d e f g h'@host). Affects multiple Solaris releases; impact is limited to information disclosure of accou...
CVE-2002-0033
Solaris cachefsd (cachefs daemon) is affected by CVE-2002-0033 due to a heap-based overflow in the cfsd_calloc function. An unauthenticated remote attacker can trigger a remote code execution by sending a crafted RPC request with a long directory and cache name, potentially gaining the privileges...
CVE-2007-3717
Technical details for CVE-2007-3717 are not provided in the supplied documents. No affected product versions, root cause, impact, or remediation are specified here; monitor for updates.
CVE-2001-0353
CVE-2001-0353 describes a buffer overflow in the Solaris and BSD line printer daemons (in.lpd) that can allow local or remote attackers to gain root privileges via the transfer job routine. Public advisories (ISS X-Force/CERT CA-2001-15) detail remote-exploit scenarios affecting Solaris 2.6/7/8 a...
CVE-2001-0594
CVE-2001-0594 affects Solaris 7/8 where kcms_configure is vulnerable to a local privilege escalation caused by a buffer overflow in a command line argument. Root cause: buffer overflow in kcms_configure. Impact: partial confidentiality, integrity, and availability (per NVD). Remediation: apply So...
CVE-2002-0158
CVE-2002-0158 refers to a buffer overflow in Xsun on Solaris 2.6–8 when processing a long -co (color database) command line argument. The overflow occurs in the heap/dynamic memory handling and can enable a local user to execute arbitrary code with root privileges, as described in the CVE details...
CVE-2010-4435
CVE-2010-4435 concerns a memory corruption/remote code execution vulnerability in the CMSD (Calendar Manager Service Daemon) RPC service used by calendar managers on multiple vendors. Connected documents confirm that the flaw exists in the CMSD handling of RPC requests (notably large XDR-encoded ...
CVE-1999-0210
The CVE-1999-0210 issue affects the Solaris automountd RPC service. It allows local or remote users to gain privileges by supplying shell metacharacters in RPC requests to automountd. The vulnerability’s root cause relates to how automountd handles input in its RPC endpoints, enabling privilege e...
CVE-1999-1014
The CVE-1999-1014 entry concerns Solaris 2.7 mail command with a buffer overflow when processing a long -m argument. The affected component is the mail command; root cause is a buffer overflow that enables local privilege escalation. The description consistently states that local users can gain p...
CVE-2000-0337
CVE-2000-0337 describes a buffer overflow in the Xsun X server component of Solaris 7. The vulnerability allows local users to gain root privileges by supplying an excessively long -dev parameter. The available documents identify the affected system as Solaris 7 and the vulnerable component as th...
CVE-2002-0436
The CVE-2002-0436 entry maps to the SunSolve CD package: the CGI script sscd_suncourier.pl does not validate the email parameter, enabling remote command execution via shell metacharacters. Documented by NVD/Nessus/OpenVAS references, this is a clientless, remote issue affecting Sunsolve CD CGI i...
CVE-2002-0678
CVE-2002-0678 relates to the CDE ToolTalk RPC database server (rpc.ttdbserverd). The OpenVAS/CERT CORE disclosures describe two vulnerabilities: (1) _TT_ISCLOSE range-check flaw permitting memory overwriting of the process when a local or remote client calls _TT_ISCLOSE; (2) _TT_TRANSACTION/log_f...
CVE-2004-1307
CVE-2004-1307 describes a heap-based buffer overflow in libtiff 3.6.1 triggered by a TIFF file using the STRIPOFFSETS flag with many strips, due to an overflow in TIFFFetchStripThing in tif_dirread.c. The vulnerability could allow remote code execution as a result of processing crafted TIFF files...
CVE-2006-5215
CVE-2006-5215 describes a local vulnerability in the Xsession script used by XDM across NetBSD, X.Org, and Solaris up to certain dates. The issue arises from a symlink attack on /tmp/xses-$USER, allowing a local user to overwrite arbitrary files or read another user’s Xsession errors file. Connec...
CVE-2012-4288
Wireshark vulnerability CVE-2012-4288 affects the XTP dissector (epan/dissectors/packet-xtp.c). An integer overflow allows remote attackers to cause a denial of service (loop or application crash) by sending a large span length. Affected branches: 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8...
CVE-1999-0241
The provided connected documents confirm CVE-1999-0241 affects X Windows (X11) with a vulnerability in the authentication cookies: guessable magic cookies allow remote attackers to execute commands (e.g., via xterm). Root cause is guessable, enabling remote command execution with no authenticatio...
CVE-1999-0767
CVE-1999-0767 is a buffer overflow vulnerability described in Solaris components (libc, ufsrestore, and rcp) triggered via the LC_MESSAGES environment variable. The available connected records confirm the affected software and the root cause (buffer overflow), with the PT-1999-1338 entry reiterat...
CVE-2004-0360
CVE-2004-0360 describes an unknown vulnerability in Solaris 8/9 passwd(1) that enables local privilege escalation via a circ() stack-based overflow. Public artifacts (Exploit-DB, 0day) document local root exploits exploiting a circ() buffer overflow and, in some descriptions, a ret-into-ld.so tec...
CVE-2012-4298
Wireshark 1.8.x contains CVE-2012-4298 due to an integer signedness error in wiretap/vwr.c (Ixia IxVeriWave file parser). A crafted packet-trace file triggers a buffer overflow, allowing remote code execution. Affected: Wireshark 1.8.x prior to 1.8.2. Mitigation: upgrade to Wireshark 1.8.2 or lat...
CVE-1999-0493
The CVE-1999-0493 entry describes a vulnerability in rpc.statd bounce behavior that can forward RPC calls to the local OS via SM_MON/SM_NOTIFY. Exploitation can chain with automountd vulnerabilities to remotely trigger issues in automountd, potentially escalating to root in affected setups. The i...
CVE-1999-0687
Technical details (affected product/version, impact, remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources.
CVE-2007-2045
The CVE-2007-2045 vulnerability affects the IP stack in Sun Solaris 8 and 9. A remote attacker can trigger a denial-of-service (CPU consumption) by sending crafted IP packets, likely involving fragmented packets with duplicate or missing fragments. Impact is described as CPU depletion leading to ...
CVE-2013-0415
CVE-2013-0415 is linked to Solaris 10 in the Bind/Postinstall script for the Bind package. Connected sources indicate a local, privilege-escalation vulnerability affecting Solaris 10 (both SPARC and x86) with the potential for arbitrary code execution after user/OS authentication and additional c...
CVE-2013-3799
CVE-2013-3799 concerns Oracle Solaris on AMD64 where the Kernel component contains a local denial-of-service condition. The NVD entry notes an unspecified vulnerability that allows local users to affect availability via kernel-related vectors. A Nessus summary from the July 2013 CPU update confir...
CVE-1999-0055
CVE-1999-0055 involves buffer overflows in Sun libnsl that allow root access. The connected Red Hat, NVD, CVE and EUVD entries repeat the same description; no concrete product versions, root cause specifics (beyond “libnsl” and “buffer overflow”), or remediation details are provided in the connec...
CVE-1999-0132
CVE-1999-0132 describes a local privilege escalation in Expreserve used by vi and ex, where local users can overwrite arbitrary files and gain root access. The connected documents confirm the affected components (vi/ex and Expreserve) and the outcome, but do not provide the underlying root cause ...
CVE-1999-1586
CVE-1999-1586 describes a local privilege-escalation in SunOS 4.1.x where the loader path loadmodule , used by xnews, does not properly sanitize its environment. The underlying issue is inadequate environment handling, allowing local users to gain privileges. Affected product/component: SunOS 4.1...
CVE-2001-0652
CVE-2001-0652 is a heap buffer overflow in the Solaris xlock utility (SunOS/Solaris 2.6–8) that allows a local user to gain root privileges by supplying an overly long environment value in XFILESEARCHPATH or XUSERFILESEARCHPATH. The underlying issue is a lack of length checks when copying the env...
CVE-2001-0779
CVE-2001-0779 describes a remote buffer overflow in the rpc.yppasswdd (yppasswd) service, affecting Solaris 2.6/7/8 (and related implications for AIX per vendor notes). The vulnerability allows a remote attacker to gain root privileges by supplying a long username string, as documented by multipl...
CVE-2002-0089
The CVE-2002-0089 issue affects Sun Solaris admintool across Solaris 2.5 through 8 (SPARC/x86). The vulnerability is a buffer overflow in admintool triggered by long strings in two input vectors: (1) the -d command line option and (2) the PRODVERS variable in the .cdtoc file. This can allow a loc...
CVE-2013-0398
CVE-2013-0398 affects Oracle Solaris 8–11 with a vulnerability in the Utility/Remote Execution Server (in.rexecd). The issue allows unauthenticated remote attackers to read data via network access, leveraging the Rexecd component. Nessus entries for Solaris 10 SPARC/x86 (148975-01, 148976-01) and...
CVE-1999-0099
CVE-1999-0099 is a vulnerability in the syslog utility described as a buffer overflow that can allow local or remote attackers to gain root privileges. The connected sources (NVD, Red Hat CVE page, CVE list, EUVD/PTSecurity notes) corroborate the issue but do not consistently provide concrete det...