CVE-1999-0315

CVE-1999-0315 : A buffer overflow in the Solaris fdformat command can grant root access to local users. This is corroborated by the Red Hat CVE entry and the CVE record. The provided documents do not specify affected Solaris versions, concrete patch versions, or remediation steps. No exploitation...

CVE-2002-1345

Technical details for CVE-2002-1345 are not provided in the supplied connected documents; no explicit affected products, versions, or fixes are available here. Monitor for updates.

CVE-2007-5921

CVE-2007-5921 concerns an unspecified vulnerability in the ioctl interface of the Solaris Volume Manager (SVM) on Solaris 9 and 10 that allows local users to trigger a denial of service (panic). The core issue and affected components are not detailed in the initial description. Connected document...

CVE-2008-2946

CVE-2008-2946 affects Sun Solaris 8–10, specifically the SNMP-DMI mapper subagent daemon (snmpXdmid) in Solstice Enterprise Agents. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending malformed SNMP packets. Public references and Nessus plugins confirm...

CVE-2012-4294

Wireshark 1.8.x before 1.8.2 is affected by CVE-2012-4294 due to a buffer overflow in the ERF dissector’s channelised_fill_sdh_g707_format function, allowing remote attackers to execute arbitrary code via a large speed value. The issue is fixed in Wireshark 1.8.2; upgrading to that version is the...

CVE-2013-5862

CVE-2013-5862 affects Oracle Solaris 10 and 11.1 (CPU performance counters CPC drivers). The vulnerability is localized to CPC driver components and can cause a complete denial of service (OS hang/crash) on affected systems. The connected Nessus entries reference patch updates for similar CPC-dri...

CVE-2014-4280

Technical details for CVE-2014-4280 are not provided in the supplied documents; monitor for updates.

CVE-2014-4283

Technical details about CVE-2014-4283 are not publicly disclosed in the provided documents. Monitor for updates.

CVE-2014-6473

CVE-2014-6473 affects Oracle Solaris 10/11 (Zone Framework). The Solaris Zone Framework vulnerability allows a local attacker to achieve arbitrary code execution, potentially taking control of the OS. Affected platforms include Solaris 10 SPARC with branded zones; the vulnerability is discussed i...

CVE-1999-0298

The CVE-1999-0298 issue affects ypbind when the -ypset and -ypsetme options are activated in Linux Slackware and SunOS. The underlying vulnerability is a directory traversal attack (".." path) that allows overwriting files. Reported impact includes local and remote attackers able to modify files....

CVE-1999-0908

CVE-1999-0908 affects the Solaris TCP streams driver. The vulnerability arises from recursive calls to mutex_enter, leading to a denial of service where the server panics. Connected documents corroborate the same description across Red Hat and other sources, but do not specify product versions, p...

CVE-1999-1123

CVE-1999-1123 affects Sun Source tapes (sunsrc). Local users can gain root privileges through setuid root programs (makeinstall, winstall). The root cause is not explicitly detailed in the provided documents, but the vulnerability enables local privilege escalation with complete confidentiality, ...

CVE-1999-1212

The CVE-1999-1212 entry concerns in.rlogind on SunOS 4.0.3 and 4.0.3c, enabling local users to gain root privileges. The PT-1991-1009 document corroborates a local privilege escalation in these SunOS versions and provides a remediation path: update to a fixed version. It does not specify the exac...

CVE-1999-1388

The CVE-1999-1388 entry concerns SunOS 4.1.x, where the passwd utility is vulnerable to a local symlink attack via the -F command line argument. This allows local users to overwrite arbitrary files, due to the underlying symlink race condition in passwd. The affected component is the passwd progr...

CVE-1999-1584

CVE-1999-1584 affects SunOS 4.1.1–4.1.3c (and Open Windows 3.0) where two components, loadmodule and modload (when modload runs with setuid/setgid privileges), improperly handle environment variables. This allows local users to gain root privileges. The underlying cause is improper environment sa...

CVE-2002-0085

CVE-2002-0085 affects Sun Solaris cachefsd on Solaris 2.6, 7, and 8. A remote attacker can cause a denial of service (crash) by sending an RPC request with an invalid procedure call. The vulnerability is in the cachefsd daemon used for NFS/cachefs, with advisory materials (CERT/CA-2002-11 and eSO...

CVE-2002-0572

CVE-2002-0572 affects BSD-based systems (notably FreeBSD 4.5 and earlier); the issue arises when a local user closes standard input/output/error (FDs 0–2) and a subsequent setuid-invoked I/O operation reuses those descriptors, allowing read/write access to restricted files. Connected records corr...

CVE-2002-1228

The CVE-2002-1228 entry concerns Solaris NFS, specifically the lockd daemon. The vulnerability allows an NFS client to cause a denial of service by killing the lockd process on affected Solaris versions (2.5.1–9). Reported impact is partial availability loss. Public details in connected sources i...

CVE-2003-0091

CVE-2003-0091 corresponds to a stack-based buffer overflow in the lpq program on Sun Solaris 2.6/2.6_x86/7, in the bsd_queue() function, allowing local users to gain root privileges. Solaris 8/9 mitigates this via strlcat. Exploitation details are not provided in the documents; NSFOCUS reports th...

CVE-2005-2032

CVE-2005-2032 concerns an unknown vulnerability in lpadmin on Sun Solaris 7/8/9 that allows local users to overwrite arbitrary files. Connected sources document affected products as Solaris with lp patches to remediate (e.g., 107115-20 for Solaris 7 SPARC, 107116-20 for Solaris 7 x86, 109320-22 a...

CVE-2006-5073

CVE-2006-5073 is an unspecified vulnerability affecting Sun Solaris 8, 9 and 10 that allows remote attackers to cause a denial of service (kernel panic) by sending crafted IPv6 packets. The description notes it is a different issue from CVE-2006-5013. The provided sources (NVD/CVE records) do not...

CVE-2010-3586

Technical details about CVE-2010-3586 are not provided in the supplied documents. Public information here is limited to a vague description of an unspecified Solaris 9 vulnerability related to XScreenSaver. Monitor for updates and new advisories.

CVE-2012-3210

CVE-2012-3210 affects Oracle Solaris 11 kernel, with remote attackers able to impact availability via network vectors. The vulnerability is described as an unspecified kernel-related issue exploitable over the network, leading to complete DoS/ hangs as indicated by CVSS metrics (AV:N, AC:L, A:I/N...

CVE-2012-4286

Wireshark 1.8.x before 1.8.2 is affected by CVE-2012-4286 in the pcap-ng file parser (wiretap/pcapng.c). The vulnerability allows user-assisted remote attackers to cause a denial of service via a crafted pcap-ng file, resulting in a divide-by-zero error and application crash. Remediation per the ...

CVE-2012-5095

CVE-2012-5095 affects Oracle Solaris 10, specifically the inetd(1M) component on both x86 and SPARC. The vulnerability is described as an unspecified issue in inetd that could allow local users to affect confidentiality, integrity, and availability via unknown vectors, with the Solaris 10 patchin...

CVE-2013-5876

CVE-2013-5876 is discussed in Solaris-related security data as a Kernel vulnerability affecting Oracle Solaris 10 and 11.1. The connected Nessus/Known-CVEs entries indicate the Kernel component is vulnerable on these versions, with exploitation described as easily exploitable for a local attacker...

CVE-1999-0190

The connected documents confirm CVE-1999-0190 affects Solaris rpcbind, where the vulnerable component (rpcbind) can be exploited to overwrite arbitrary files and gain root access. The materials do not provide version details, exploit vectors, or remediation steps. There is no information on explo...

CVE-1999-0318

The CVE-1999-0318 issue affects the xmcd 2.0p12 release and is caused by a buffer overflow triggered via an environment variable, allowing local users to gain access. The PT-1997-1131 entry corroborates local privilege escalation through an environmental variable; it does not provide a product pa...

CVE-1999-0410

The CVE-1999-0410 entry concerns Solaris 2.6 (i386) where the cancel command triggers a buffer overflow that allows local users to obtain root access. The linked Red Hat, CVE, and EUVD records confirm the same issue and vulnerable component (the cancel command) with root-level impact on that plat...

CVE-1999-0837

CVE-1999-0837 describes a denial-of-service in BIND caused by improperly closing TCP sessions via so_linger. The Red Hat entry and NVD confirm the issue; Nessus references indicate affected BIND versions and list remediation as upgrading to BIND 4.9.7-REL or 8.2.2-P5. The available documents do n...

CVE-1999-0859

The CVE-1999-0859 entry concerns the Solaris arp utility. The description states that local users can read files using the -f parameter, which lists lines in the file that do not parse properly, indicating a local-height confidentiality impact. The available sources (NVD CVE record, CVE List entr...

CVE-1999-0860

Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...

CVE-2001-0699

CVE-2001-0699 describes a buffer overflow in the cb_reset function of the System Service Processor (SSP) package on SunOS 5.8, enabling a local user to execute arbitrary code by supplying a long argument. The provided documents do not include a concrete mitigation, patch version, or explicit expl...

CVE-2002-1871

CVE-2002-1871 concerns Sun Solaris: the pkgadd utility in Solaris 2.5.1–8 can install files with setuid/setgid root when the pkgmap entry’s mode/owner/group contain a “?” in certain fields, enabling privilege escalation. Red Hat and CVE aggregations corroborate the same description. Core details:...

CVE-2003-1069

The CVE-2003-1069 entry concerns the Solaris Telnet daemon (in.telnetd) on Solaris 2.6–9, where remote attackers can trigger a denial of service via CPU consumption caused by an infinite loop. The vulnerability affects the Telnet service itself and is exploitable remotely over the network. The av...

CVE-2003-1079

The CVE-2003-1079 entry concerns a vulnerability in UDP RPC used by Solaris (SPARC: 2.5.1–9; x86: 2.5.1–8). The underlying issue is that certain RPC call arguments can cause excessive memory allocation, enabling remote attackers to trigger a denial of service via memory consumption. The descripti...

CVE-2006-4306

CVE-2006-4306 concerns Solaris 8 and 9 prior to 2006-08-21. The NVD entry describes an unspecified vulnerability that allows local users to execute arbitrary commands, leveraging the default RBAC (Role-Based Access Control) settings in the File System Management profile. The precise vector is not...

CVE-2008-1480

The CVE-2008-1480 issue affects Sun Solaris/Oracle Solaris systems with the rpc.metad daemon. The vulnerable component is rpc.metad (usr/sbin/rpc.metad on Solaris 9/10), where a malformed RPC request can trigger a denial-of-service (daemon crash). Connected advisories indicate fixed patches: 1385...

CVE-2008-2121

CVE-2008-2121 affects the TCP implementation in Sun Solaris 8, 9, and 10, allowing remote attackers to cause a denial of service via a TCP SYN flood attack, resulting in CPU consumption and new-connection timeouts. Public entries confirm the vulnerability in Solaris TCP and its CVE listing. The c...

CVE-2008-5550

CVE-2008-5550 is an open redirect vulnerability in Sun Java Web Console, affecting Sun Java Web Console 3.0.2–3.0.5 and Solaris 10. It stems from BeginLogin.jsp (console/faces/jsp/login/BeginLogin.jsp) and allows remote attackers to redirect users to arbitrary sites via the redirect_url parameter...

CVE-2008-7300

CVE-2008-7300 describes a vulnerability in the labeled networking implementation of Solaris Trusted Extensions on Sun Solaris 10 and OpenSolaris (snv_39 through snv_67). When a labeled zone is in the installed state, remote authenticated users can bypass Mandatory Access Control (MAC) and gain ac...

CVE-2010-4415

CVE-2010-4415 is described as an unspecified vulnerability in Oracle Solaris 8, 9, and 10 related to libc that could allow local users to affect confidentiality, integrity, and availability via unknown vectors. The connected documents indicate Solaris libc patches as remediation: patch 112874-47 ...

CVE-2012-3199

CVE-2012-3199 affects Oracle Solaris 10 and 11, specifically the Gnome Trusted Extension component. The vulnerability allows local attackers to compromise confidentiality, integrity, and availability via unknown vectors; exploitation requires local access (logon) with HIGH impact and no authentic...

CVE-2013-1496

CVE-2013-1496 pertains to Solaris kernel/IO vulnerabilities in Oracle Sun Solaris 10 and 11. The connected Nessus entries identify affected platforms as Solaris 10/11 (x86 and SPARC) with exploitation requiring local access, potentially causing an OS hang or repeated crashes (complete DOS). Affec...

CVE-2014-4215

CVE-2014-4215 affects Oracle Solaris 10 and 11.1, involving CPU performance counter (CPC) drivers. The vulnerability is local and can cause an OS hang or crash (DOS) via CPC driver handling, as described by the CVE entry and corroborating Solaris patch advisories. Connected sources indicate affec...

CVE-2014-6490

CVE-2014-6490 is a Solaris 11 vulnerability affecting the SMB server user component. The issue enables unauthenticated, network-based SMB access that can cause a partial denial of service on affected Solaris systems. The related Oracle Solaris oct2014 CPU advisory/patch set addresses this and oth...

CVE-2015-0429

Summary: CVE-2015-0429 affects Oracle Solaris 10 and 11, specifically the RPC Utility subcomponent. The vulnerability is described as an unspecified local issue that can impact integrity and availability when exploited by a local user. The Nessus/CPU entries confirm affected products and versions...

CVE-1999-0223

CVE-1999-0223 describes a crash in Solaris syslogd when it processes a message from a host that lacks an inverse DNS entry. The issue is tied to the syslogd service on Solaris; the root cause is the handling of such messages, leading to a crash. Public references (NVD entry) indicate an impact on...

CVE-1999-0786

The CVE-1999-0786 entry concerns the Solaris dynamic linker. Vulnerability: a local user can create arbitrary files via the LD_PROFILE environmental variable and a symlink attack affecting the dynamic linker. Affected component: Solaris dynamic linker; root cause: LD_PROFILE manipulation enabling...

CVE-1999-0948

CVE-1999-0948 describes a buffer overflow in the uum program for the Canna input system that allows local users to gain root privileges. This is corroborated by multiple sources (NVD, CVE List, Red Hat). The connected documents do not specify affected versions, exact root cause details beyond “bu...