CVE-2001-0190

Vulnerable component: Solaris cu (cu) in /usr/bin/cu. Root cause: buffer overflow triggered by a long program name (arg0). Impact: local privilege escalation on Solaris 2.8 and earlier (and potentially other OSes as per CVE). Remediation: apply Solaris Update for cu 111071-01 (cu update) or equiv...

CVE-2002-0085

CVE-2002-0085 affects Sun Solaris cachefsd on Solaris 2.6, 7, and 8. A remote attacker can cause a denial of service (crash) by sending an RPC request with an invalid procedure call. The vulnerability is in the cachefsd daemon used for NFS/cachefs, with advisory materials (CERT/CA-2002-11 and eSO...

CVE-2002-0572

CVE-2002-0572 affects BSD-based systems (notably FreeBSD 4.5 and earlier); the issue arises when a local user closes standard input/output/error (FDs 0–2) and a subsequent setuid-invoked I/O operation reuses those descriptors, allowing read/write access to restricted files. Connected records corr...

CVE-2002-1345

Technical details for CVE-2002-1345 are not provided in the supplied connected documents; no explicit affected products, versions, or fixes are available here. Monitor for updates.

CVE-2003-1061

The CVE-2003-1061 entry describes a race condition in Solaris kernels (versions 2.6–9) that can allow local users to trigger a denial of service (kernel panic) via the namefs function, pipe handling, and certain STREAMS routines. OpenVAS tests point to a Solaris update for /usr/kernel/fs/namefs (...

CVE-2010-3586

Technical details about CVE-2010-3586 are not provided in the supplied documents. Public information here is limited to a vague description of an unspecified Solaris 9 vulnerability related to XScreenSaver. Monitor for updates and new advisories.

CVE-2012-5095

CVE-2012-5095 affects Oracle Solaris 10, specifically the inetd(1M) component on both x86 and SPARC. The vulnerability is described as an unspecified issue in inetd that could allow local users to affect confidentiality, integrity, and availability via unknown vectors, with the Solaris 10 patchin...

CVE-2013-5862

CVE-2013-5862 affects Oracle Solaris 10 and 11.1 (CPU performance counters CPC drivers). The vulnerability is localized to CPC driver components and can cause a complete denial of service (OS hang/crash) on affected systems. The connected Nessus entries reference patch updates for similar CPC-dri...

CVE-2014-4280

Technical details for CVE-2014-4280 are not provided in the supplied documents; monitor for updates.

CVE-2014-4283

Technical details about CVE-2014-4283 are not publicly disclosed in the provided documents. Monitor for updates.

CVE-1999-0318

The CVE-1999-0318 issue affects the xmcd 2.0p12 release and is caused by a buffer overflow triggered via an environment variable, allowing local users to gain access. The PT-1997-1131 entry corroborates local privilege escalation through an environmental variable; it does not provide a product pa...

CVE-1999-0860

Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...

CVE-1999-0908

CVE-1999-0908 affects the Solaris TCP streams driver. The vulnerability arises from recursive calls to mutex_enter, leading to a denial of service where the server panics. Connected documents corroborate the same description across Red Hat and other sources, but do not specify product versions, p...

CVE-1999-1584

CVE-1999-1584 affects SunOS 4.1.1–4.1.3c (and Open Windows 3.0) where two components, loadmodule and modload (when modload runs with setuid/setgid privileges), improperly handle environment variables. This allows local users to gain root privileges. The underlying cause is improper environment sa...

CVE-2001-0403

Solaris: The /opt/JSparm/bin/perfmon program is affected. Local users can leverage the GUI’s Logging File option to create arbitrary files with root privileges. The vulnerability description and impact are drawn from CVE-2001-0403/NVD entries, which specify local root impact (C/C/I/A = high). No ...

CVE-2003-0091

CVE-2003-0091 corresponds to a stack-based buffer overflow in the lpq program on Sun Solaris 2.6/2.6_x86/7, in the bsd_queue() function, allowing local users to gain root privileges. Solaris 8/9 mitigates this via strlcat. Exploitation details are not provided in the documents; NSFOCUS reports th...

CVE-2003-0092

CVE-2003-0092 describes a heap-based buffer overflow in Solaris dtsession (Sun Solaris 2.5.1–9) that allows local users to gain root privileges by supplying a long HOME environment variable. The issue arises from an inadequate length check in handling HOME, enabling arbitrary code execution with ...

CVE-2006-4306

CVE-2006-4306 concerns Solaris 8 and 9 prior to 2006-08-21. The NVD entry describes an unspecified vulnerability that allows local users to execute arbitrary commands, leveraging the default RBAC (Role-Based Access Control) settings in the File System Management profile. The precise vector is not...

CVE-2008-2946

CVE-2008-2946 affects Sun Solaris 8–10, specifically the SNMP-DMI mapper subagent daemon (snmpXdmid) in Solstice Enterprise Agents. The vulnerability allows remote attackers to cause a denial of service (daemon crash) by sending malformed SNMP packets. Public references and Nessus plugins confirm...

CVE-2008-5550

CVE-2008-5550 is an open redirect vulnerability in Sun Java Web Console, affecting Sun Java Web Console 3.0.2–3.0.5 and Solaris 10. It stems from BeginLogin.jsp (console/faces/jsp/login/BeginLogin.jsp) and allows remote attackers to redirect users to arbitrary sites via the redirect_url parameter...

CVE-2008-7300

CVE-2008-7300 describes a vulnerability in the labeled networking implementation of Solaris Trusted Extensions on Sun Solaris 10 and OpenSolaris (snv_39 through snv_67). When a labeled zone is in the installed state, remote authenticated users can bypass Mandatory Access Control (MAC) and gain ac...

CVE-2010-4415

CVE-2010-4415 is described as an unspecified vulnerability in Oracle Solaris 8, 9, and 10 related to libc that could allow local users to affect confidentiality, integrity, and availability via unknown vectors. The connected documents indicate Solaris libc patches as remediation: patch 112874-47 ...

CVE-2012-3210

CVE-2012-3210 affects Oracle Solaris 11 kernel, with remote attackers able to impact availability via network vectors. The vulnerability is described as an unspecified kernel-related issue exploitable over the network, leading to complete DoS/ hangs as indicated by CVSS metrics (AV:N, AC:L, A:I/N...

CVE-2013-1496

CVE-2013-1496 pertains to Solaris kernel/IO vulnerabilities in Oracle Sun Solaris 10 and 11. The connected Nessus entries identify affected platforms as Solaris 10/11 (x86 and SPARC) with exploitation requiring local access, potentially causing an OS hang or repeated crashes (complete DOS). Affec...

CVE-2013-5876

CVE-2013-5876 is discussed in Solaris-related security data as a Kernel vulnerability affecting Oracle Solaris 10 and 11.1. The connected Nessus/Known-CVEs entries indicate the Kernel component is vulnerable on these versions, with exploitation described as easily exploitable for a local attacker...

CVE-2015-0429

Summary: CVE-2015-0429 affects Oracle Solaris 10 and 11, specifically the RPC Utility subcomponent. The vulnerability is described as an unspecified local issue that can impact integrity and availability when exploited by a local user. The Nessus/CPU entries confirm affected products and versions...

CVE-1999-0298

The CVE-1999-0298 issue affects ypbind when the -ypset and -ypsetme options are activated in Linux Slackware and SunOS. The underlying vulnerability is a directory traversal attack (".." path) that allows overwriting files. Reported impact includes local and remote attackers able to modify files....

CVE-1999-0949

CVE-1999-0949 involves a buffer overflow in the canuum program for the Canna input system. The Red Hat advisory corroborates that this vulnerability allows local users to gain root privileges. The available documents do not provide technical specifics such as vulnerable versions, exact code path,...

CVE-1999-1123

CVE-1999-1123 affects Sun Source tapes (sunsrc). Local users can gain root privileges through setuid root programs (makeinstall, winstall). The root cause is not explicitly detailed in the provided documents, but the vulnerability enables local privilege escalation with complete confidentiality, ...

CVE-1999-1212

The CVE-1999-1212 entry concerns in.rlogind on SunOS 4.0.3 and 4.0.3c, enabling local users to gain root privileges. The PT-1991-1009 document corroborates a local privilege escalation in these SunOS versions and provides a remediation path: update to a fixed version. It does not specify the exac...

CVE-2002-1228

The CVE-2002-1228 entry concerns Solaris NFS, specifically the lockd daemon. The vulnerability allows an NFS client to cause a denial of service by killing the lockd process on affected Solaris versions (2.5.1–9). Reported impact is partial availability loss. Public details in connected sources i...

CVE-2002-1871

CVE-2002-1871 concerns Sun Solaris: the pkgadd utility in Solaris 2.5.1–8 can install files with setuid/setgid root when the pkgmap entry’s mode/owner/group contain a “?” in certain fields, enabling privilege escalation. Red Hat and CVE aggregations corroborate the same description. Core details:...

CVE-2005-2032

CVE-2005-2032 concerns an unknown vulnerability in lpadmin on Sun Solaris 7/8/9 that allows local users to overwrite arbitrary files. Connected sources document affected products as Solaris with lp patches to remediate (e.g., 107115-20 for Solaris 7 SPARC, 107116-20 for Solaris 7 x86, 109320-22 a...

CVE-2006-5073

CVE-2006-5073 is an unspecified vulnerability affecting Sun Solaris 8, 9 and 10 that allows remote attackers to cause a denial of service (kernel panic) by sending crafted IPv6 packets. The description notes it is a different issue from CVE-2006-5013. The provided sources (NVD/CVE records) do not...

CVE-2008-1480

The CVE-2008-1480 issue affects Sun Solaris/Oracle Solaris systems with the rpc.metad daemon. The vulnerable component is rpc.metad (usr/sbin/rpc.metad on Solaris 9/10), where a malformed RPC request can trigger a denial-of-service (daemon crash). Connected advisories indicate fixed patches: 1385...

CVE-2008-2144

CVE-2008-2144 affects Sun Solaris print service on Solaris 8/9/10. The underlying issues are multiple unspecified vulnerabilities in the print service that allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors. Connected patch data shows specific remedi...

CVE-2008-3426

Affected product: Sun Solaris/OpenSolaris PICLD (Platform Information and Control Library daemon) running on Solaris 8–10 and OpenSolaris builds snv_01–snv_95. Vulnerable component: picld; impact: local users can cause a denial of service that affects utilities like prtdiag, prtpicl, and prtfru. ...

CVE-2011-2298

Technical details about CVE-2011-2298 are not publicly available in the provided documents. Monitor for updates in linked advisories and databases.

CVE-2012-3199

CVE-2012-3199 affects Oracle Solaris 10 and 11, specifically the Gnome Trusted Extension component. The vulnerability allows local attackers to compromise confidentiality, integrity, and availability via unknown vectors; exploitation requires local access (logon) with HIGH impact and no authentic...

CVE-2012-4286

Wireshark 1.8.x before 1.8.2 is affected by CVE-2012-4286 in the pcap-ng file parser (wiretap/pcapng.c). The vulnerability allows user-assisted remote attackers to cause a denial of service via a crafted pcap-ng file, resulting in a divide-by-zero error and application crash. Remediation per the ...

CVE-2013-3837

CVE-2013-3837 affects Oracle Solaris 10 and Solaris 11.1 in the Solaris component Cacao. The vulnerability allows unauthenticated network attacks (via SNMP) that can cause a partial denial of service. The CVE is listed in the Oct 2013 Oracle CPU and is addressed by the oct2013_SRU11_1_12_5_0 patc...

CVE-2014-6481

CVE-2014-6481 affects Oracle Solaris 10 and 11, specifically the KSSL component. The Nessus/NASL entries describe a vulnerability that allows unauthenticated, network-based attacks via SSL/TLS, potentially leading to unauthorized read access to Solaris data. Affected: Solaris 10/11 (KSSL). Root c...

CVE-2014-6490

CVE-2014-6490 is a Solaris 11 vulnerability affecting the SMB server user component. The issue enables unauthenticated, network-based SMB access that can cause a partial denial of service on affected Solaris systems. The related Oracle Solaris oct2014 CPU advisory/patch set addresses this and oth...

CVE-1999-0190

The connected documents confirm CVE-1999-0190 affects Solaris rpcbind, where the vulnerable component (rpcbind) can be exploited to overwrite arbitrary files and gain root access. The materials do not provide version details, exploit vectors, or remediation steps. There is no information on explo...

CVE-1999-0223

CVE-1999-0223 describes a crash in Solaris syslogd when it processes a message from a host that lacks an inverse DNS entry. The issue is tied to the syslogd service on Solaris; the root cause is the handling of such messages, leading to a crash. Public references (NVD entry) indicate an impact on...

CVE-1999-0786

The CVE-1999-0786 entry concerns the Solaris dynamic linker. Vulnerability: a local user can create arbitrary files via the LD_PROFILE environmental variable and a symlink attack affecting the dynamic linker. Affected component: Solaris dynamic linker; root cause: LD_PROFILE manipulation enabling...

CVE-1999-0795

CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...

CVE-1999-0806

CVE-1999-0806 describes a buffer overflow in the Solaris dtprintinfo program. Connected records confirm the vulnerable component is dtprintinfo in Solaris, with the underlying flaw being a buffer overflow. The CVSS metrics indicate a local, low-complexity attack that can compromise confidentialit...

CVE-1999-0837

CVE-1999-0837 describes a denial-of-service in BIND caused by improperly closing TCP sessions via so_linger. The Red Hat entry and NVD confirm the issue; Nessus references indicate affected BIND versions and list remediation as upgrading to BIND 4.9.7-REL or 8.2.2-P5. The available documents do n...

CVE-1999-0840

CVE-1999-0840 affects CDE dtmail and dtmailpr; the description indicates a buffer overflow caused by a long -f option, enabling local users to gain privileges. The provided data do not specify affected versions, root cause code paths, or explicit remediation steps. Exploitation details or in-the-...