CVE-2014-6570

CVE-2014-6570 is a local, unspecified vulnerability in Oracle Solaris 11 affecting the File System component, with impact stated as a denial or availability issue. The advisory context across connected documents confirms Solaris 11 is the affected platform, and that patches addressing this and re...

CVE-1999-0054

Technical details about CVE-1999-0054 are not publicly available in the provided documents. The connected Red Hat/EUVD/CVE entries repeat the generic denial-of-service description without root-cause, affected versions, or fixes. Monitor for updates.

CVE-1999-0055

CVE-1999-0055 involves buffer overflows in Sun libnsl that allow root access. The connected Red Hat, NVD, CVE and EUVD entries repeat the same description; no concrete product versions, root cause specifics (beyond “libnsl” and “buffer overflow”), or remediation details are provided in the connec...

CVE-1999-0099

CVE-1999-0099 is a vulnerability in the syslog utility described as a buffer overflow that can allow local or remote attackers to gain root privileges. The connected sources (NVD, Red Hat CVE page, CVE list, EUVD/PTSecurity notes) corroborate the issue but do not consistently provide concrete det...

CVE-1999-0295

The CVE-1999-0295 entry concerns Solaris: the sysdef command can read kernel memory, enabling local privilege escalation to root. The available sources confirm the local access requirement and kernel-memory read as the impact, but no vendor version, component patch, exploit details, or remediatio...

CVE-2001-1414

Technical details such as affected products, exact root cause, impact, affected versions, and remediation are not publicly provided in the supplied documents. Monitor for updates.

CVE-2002-0089

The CVE-2002-0089 issue affects Sun Solaris admintool across Solaris 2.5 through 8 (SPARC/x86). The vulnerability is a buffer overflow in admintool triggered by long strings in two input vectors: (1) the -d command line option and (2) the PRODVERS variable in the .cdtoc file. This can allow a loc...

CVE-2012-4292

The CVE-2012-4292 issue affects the Wireshark STUN dissector (epan/dissectors/packet-stun.c). Vulnerable in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2, where the dissect_stun_message function does not properly interact with key-destruction behavior in a certain tre...

CVE-2012-4293

Wireshark vulnerability CVE-2012-4293 affects the EtherCAT Mailbox dissector (packet-ecatmb.c). The flaw arises from improper handling of certain integer fields, enabling a remote attacker to trigger a denial of service (application exit) by sending a malformed EtherCAT mailbox packet. Affected p...

CVE-2012-4296

Wireshark vulnerability CVE-2012-4296: Buffer overflow in epan/dissectors/packet-rtps2.c (RTPS2 dissector) causes DoS via a malformed packet. Affected: Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2. Remediation: upgrade to fixed versions (1.4.15, 1.6.10, or 1.8.2 and ...

CVE-1999-0120

CVE-1999-0120 concerns Solaris: an improperly writable utmp file (writable by non-root users) enables local privilege escalation to root. The root cause is that the utmp file is writable by non-root users, allowing manipulation that can compromise confidentiality, integrity, and availability. The...

CVE-1999-0334

CVE-1999-0334 affects Solaris 2.2–2.3. When fsck fails at startup, a local user with physical access can obtain root privileges (root access). Root cause: startup fsck issue allowing escalation on physical access. Impact: local privilege escalation with full system compromise potential if attacke...

CVE-2001-0652

CVE-2001-0652 is a heap buffer overflow in the Solaris xlock utility (SunOS/Solaris 2.6–8) that allows a local user to gain root privileges by supplying an overly long environment value in XFILESEARCHPATH or XUSERFILESEARCHPATH. The underlying issue is a lack of length checks when copying the env...

CVE-1999-0696

CVE-1999-0696 concerns a buffer overflow in the Calendar Manager Service Daemon (rpc.cmsd) of the CDE Calendar Manager. The vulnerability is described as a buffer overflow (root cause) that could impact the service’s confidentiality, integrity, and availability (CVSS 2.0 base score 10.0, network ...

CVE-2002-0084

Summary: CVE-2002-0084 is a buffer/stack overflow in the Solaris cachefsd (fscache_setup) that could let a local attacker gain root privileges through a long mount argument on Solaris 2.6, 7, or 8. Connected sources confirm the issue as a local privilege escalation in cachefsd, with references to...

CVE-2004-0780

CVE-2004-0780: Buffer overflow in uustat on Sun Solaris 8/9 allows local code execution via a long -S argument. Affected: uustat component; root cause: overflow in argument handling. Impact: local privilege escalation with complete confidentiality, integrity, and availability implications. Remedi...

CVE-1999-0056

CVE-1999-0056 describes a buffer overflow in Sun's ping program that can grant root access to local users. The connected documents confirm the issue and impact (local code execution with full privileges) but do not provide specific patch versions or remediation details. Exploit information is not...

CVE-1999-1102

The CVE-1999-1102 entry concerns lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1 and other BSD-based systems. The vulnerability arises from a symlink-related attack in lpr that enables local users to create or overwrite arbitrary files after the program is invoked 1000 times. Root cause is a symlink hand...

CVE-2007-0503

CVE-2007-0503 concerns an unspecified vulnerability in Sun Solaris KCMS calibrate (kcms_calibrate) affecting Solaris 8 and 9 prior to 20071122, allowing local users to execute arbitrary commands. The connected OpenVAS entries indicate KCMS-related Solaris updates, including patches 114637-05, 114...

CVE-2007-3093

CVE-2007-3093 refers to an unspecified vulnerability in the Solaris Management Console (SMC) logging mechanism on Solaris 8–10 (before 2007-06-05) that allows remote code execution via unspecified vectors related to the WBEM server. The NVD entry lists a HIGH base score (CVSSv2 10.0) with network...

CVE-2007-6216

CVE-2007-6216 concerns a race condition in the Fibre Channel protocol (fcp) driver and the Solaris 10 devfs. Connected sources (Tenable Nessus patches 128491-01 for SPARC and 128492-01 for x86) indicate a patch-based remediation: install Solaris patch 128491-01 (SPARC) or 128492-01 (x86) to addre...

CVE-1999-0134

The CVE-1999-0134 entry concerns the vold service in Solaris 2.x, described as allowing local users to gain root access. The connected Red Hat and CVE catalogs reiterate the same impact. No explicit root cause details, affected versions beyond “Solaris 2.x,” fixes, or mitigation steps are provide...

CVE-1999-0214

CVE-1999-0214 : The provided documents describe a denial-of-service condition caused by sending forged ICMP unreachable packets. The connected Red Hat and CVE records repeat the same description, but the documents do not specify affected products, versions, root-cause details beyond the ICMP forg...

CVE-1999-1585

The CVE-1999-1585 entry concerns Sun Solaris 2.x (possibly before 2.4) where the rcS and mountall programs start a privileged shell on the system console if fsck fails during boot. This local vulnerability could let attackers with physical access gain root privileges. The root cause is the boot-t...

CVE-2000-0949

CVE-2000-0949 describes a heap overflow in the savestr function of LBNL traceroute 1.4a5 and earlier. A local user can execute arbitrary commands via the -g option. The connected Mandrake advisory notes the traceroute program is setuid root and that a segfault/overflow could potentially lead to r...

CVE-2001-1582

This CVE describes a buffer overflow in the LDAP naming services library (libsldap) in Sun Solaris 8. The flaw lets local users execute arbitrary code by passing a long LDAP_OPTIONS environment variable to a privileged program that uses libsldap. Connected sources (Red Hat, CVE listing, NVD) corr...

CVE-2002-1980

The CVE-2002-1980 entry concerns a buffer overflow in Sun Solaris volumes-d vold (Volume Manager daemon) affecting Solaris 2.5.1 through 8. The underlying flaw is a buffer overflow in vold that allows local users to execute arbitrary code. Affected component: vold; affected platforms: Solaris 2.5...

CVE-2008-4619

CVE-2008-4619 affects Sun Solaris 9 RPC subsystem (rpcbind) via a crafted request to procedure 8 in program 100000, exploiting XDR_DECODE in taddr2uaddr and causing daemon crash (DoS). Connected documents tie this to libtirpc/TI-RPC implementations used by various vendors, with public advisories ...

CVE-1999-0040

CVE-1999-0040 affects the X Windowing System’s Xt library. The vulnerability is a buffer overflow in Xt that allows local users to execute commands with root privileges. Public details in connected sources confirm the affected component as Xt within X Windowing System, and the impact is local pri...

CVE-1999-0442

This CVE refers to Solaris ff.core, where local users can modify files. The connected documents corroborate the same description across Red Hat, CVE listing, EUVD, and NVD entries, but do not provide concrete technical details such as affected versions, root cause, exploit method, or recommended ...

CVE-1999-0848

CVE-1999-0848 concerns a denial-of-service in ISC BIND’s named daemon caused by consuming more than the configured fdmax file descriptors. This is confirmed by the NVD entry and Red Hat security page, both citing the same DoS vector. The provided connected documents do not specify exact affected ...

CVE-1999-1468

CVE-1999-1468 affects rdist in various UNIX systems. The vulnerability arises when rdist uses popen to invoke sendmail, enabling local users to gain root privileges by modifying the IFS (Internal Field Separator) variable. The provided sources confirm the component and the privileged escalation v...

CVE-2002-0679

CVE-2002-0679 concerns the CDE ToolTalk RPC database server, rpc.ttdbserverd, which contains a heap buffer overflow vulnerability triggered by an argument to the _TT_CREATE_FILE() procedure. A remote attacker could exploit this to execute arbitrary code or cause a denial of service, typically run...

CVE-2003-1073

CVE-2003-1073 describes a race condition in the Solaris at command (affecting Solaris 2.6 through 9) that allows local users to delete arbitrary files. The flaw occurs when a -r argument containing .. sequences in a job name passes the permission check but before the deletion actually happens, en...

CVE-1999-0032

Buffer overflow in lpr used on BSD-based systems including Linux allows local users to execute arbitrary code as root via a long -C option. Root cause: overflow in handling the -C classification argument. Impact: local code execution with root privileges. No remediation details are provided in th...

CVE-1999-0065

CVE-1999-0065 involves multiple buffer overflows in how dtmail handles attachments. The connected records confirm the affected component is dtmail, and the root cause is buffer overflow in processing attachments, enabling a remote attacker to execute commands. The available documents do not speci...

CVE-1999-0188

Technical details for CVE-1999-0188 are not publicly available in the provided documents. Monitor for updates.

CVE-1999-0212

Technical details (affected products, components, versions, root cause, fix) are not provided in the connected documents. Monitor for updates; current sources only restate the vulnerability description without actionable details.

CVE-1999-0213

CVE-1999-0213 concerns libnsl in Solaris that enables an attacker to cause a denial of service in rpcbind. Connected records (Red Hat, NVD, CVE List) repeat this description but do not provide concrete root-cause details, vulnerable versions, or a fix. The NVD entry shows a MAXIMUM severity (CVSS...

CVE-1999-0301

CVE-1999-0301 describes a buffer overflow in the SunOS/Solaris ps command. The connected sources confirm a local vulnerability in the ps utility that could allow a user to escalate privileges (impacting confidentiality, integrity, and availability) as indicated by the CVE record’s base metrics. T...

CVE-1999-0345

CVE-1999-0345 concerns a Jolt ICMP attack that causes denial of service in Windows 95 and Windows NT systems. The vul nerability affects the ICMP handling component (the exact vulnerable subsystem is not explicitly named in the provided documents). Reported impact is denial of service (availabili...

CVE-1999-0674

CVE-1999-0674 affects the BSD profiling system call. A local user can modify the internal data space of a program via profiling and execve, with potential impact on confidentiality, integrity, and availability as noted in the sources. No remediation steps or concrete exploit details are provided ...

CVE-1999-1211

CVE-1999-1211 affects in.telnetd on SunOS 4.1.1 and earlier; local users can gain root privileges. The PT-security entry notes the issue and states there is no information about a fix for SunOS 4.1.1 and earlier in the provided documents. No explicit exploit details are given in the connected doc...

CVE-2000-0471

CVE-2000-0471 is a Solaris vulnerability where a buffer overflow in ufsrestore during interactive extraction can allow a local user to gain root privileges via long pathnames in the dump file. The CERT page notes multiple SunOS patches (e.g., 103261-08, 103262-08, 103640-35, 105722-07, 106793-07,...

CVE-2001-1328

The CVE-2001-1328 issue is a buffer overflow in the Solaris ypbind daemon (Solaris 5.4–8) that allows remote code execution. Concrete details: the root cause is a stack overflow within YPBINDPROC_DOMAIN. Impact is described as remote arbitrary code execution with partial confidentiality/integrity...

CVE-2003-0609

CVE-2003-0609 describes a stack-based buffer overflow in Sun Solaris’ runtime linker ld.so.1 (vulnerable on Solaris 2.6–9) that lets local users gain root privileges when LD_PRELOAD is long. The root cause is a overflow in the dynamic linker when processing LD_PRELOAD, enabling a local privilege ...

CVE-1999-0136

CVE-1999-0136 affects the Kodak Color Management System (KCMS) on Solaris. A local user can write to arbitrary files and gain root access. The matter is documented across several sources, with OpenVAS indicating a Solaris update (111400-04) for kcms_server and kcms_configure as a remediation path...

CVE-1999-0818

CVE-1999-0818 notes a buffer overflow in Solaris kcms_configure triggered by a long NETPATH environment variable. The vulnerability is local (attack vector Local) with low attack complexity and no authentication, and it has complete impact on confidentiality, integrity, and availability (C:C/I:C/...

CVE-2002-1587

The CVE-2002-1587 entry concerns the libthread library (libthread.so.1 ) on Solaris 2.5.1–8 . A local attacker can cause a denial of service (hang) by forcing the application to wait for a mutex. Affected software is any application using libthread. The connected documents do not provide remediat...

CVE-2003-1071

The CVE-2003-1071 issue affects the Solaris wall daemon (rpc.walld) on Solaris 2.6–9. Local users can craft messages to logged-on users that appear to come from arbitrary UIDs by closing stderr before executing wall and supplying a spoofed From header. The attack is local and requires no authenti...