CVE-1999-0303

CVE-1999-0303 describes a buffer overflow in the BNU UUCP daemon (uucpd) triggered by long hostnames. The issue affects the BNU UUCP daemon and is caused by improper handling of hostname lengths, with CVSS metrics indicating a local, low-complexity attack that could impact confidentiality, integr...

CVE-1999-0318

The CVE-1999-0318 issue affects the xmcd 2.0p12 release and is caused by a buffer overflow triggered via an environment variable, allowing local users to gain access. The PT-1997-1131 entry corroborates local privilege escalation through an environmental variable; it does not provide a product pa...

CVE-1999-0410

The CVE-1999-0410 entry concerns Solaris 2.6 (i386) where the cancel command triggers a buffer overflow that allows local users to obtain root access. The linked Red Hat, CVE, and EUVD records confirm the same issue and vulnerable component (the cancel command) with root-level impact on that plat...

CVE-1999-0795

CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...

CVE-1999-0837

CVE-1999-0837 describes a denial-of-service in BIND caused by improperly closing TCP sessions via so_linger. The Red Hat entry and NVD confirm the issue; Nessus references indicate affected BIND versions and list remediation as upgrading to BIND 4.9.7-REL or 8.2.2-P5. The available documents do n...

CVE-1999-0860

Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...

CVE-1999-0974

The CVE-1999-0974 entry describes a vulnerability in Solaris snoop, where a buffer overflow is triggered by GETQUOTA requests to the rpc.rquotad service. The underlying issue allows remote attackers to gain root privileges on affected systems. Documents consistently identify the vulnerable compon...

CVE-2001-0115

The CVE describes a buffer overflow in the arp command on Solaris 7 and earlier, exploitable locally via a long -f parameter. Affected component: arp. Root cause: inadequate bounds checking in the -f option. Impact, as per the sources: complete confidentiality, integrity, and availability losses ...

CVE-2001-0269

The vulnerability CVE-2001-0269 affects the pam_ldap authentication module in Solaris 8, where remote attackers can bypass authentication by providing a NULL password. This leads to complete compromise of confidentiality, integrity, and availability for affected sessions. The available documents ...

CVE-2002-1584

Technical details about CVE-2002-1584 are not publicly disclosed in the provided documents; no concrete information on affected products, root cause, or remediation is available here. Monitor for updates.

CVE-2003-1067

CVE-2003-1067 involves multiple buffer overflows in Solaris’ dbm_open (used by ndbm/dbm) and dbminit functions, affecting Solaris 2.6 through 9. The underlying flaw enables local users to gain root privileges via long arguments to Xsun or other programs that invoke these functions. The connected ...

CVE-2003-1069

The CVE-2003-1069 entry concerns the Solaris Telnet daemon (in.telnetd) on Solaris 2.6–9, where remote attackers can trigger a denial of service via CPU consumption caused by an infinite loop. The vulnerability affects the Telnet service itself and is exploitable remotely over the network. The av...

CVE-2004-1354

CVE-2004-1354 affects the Solaris Management Console (SMC) in Sun Solaris 8 and 9. The issue arises because SMC generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive informa...

CVE-2006-0227

The CVE-2006-0227 entry concerns Sun Solaris 8, 9, and 10 where the lpsched component is affected. The documentation indicates multiple unspecified vulnerabilities in lpsched that could allow a local user to delete arbitrary files or disable the LP print service, with attack vectors described as ...

CVE-2006-4319

CVE-2006-4319 is a buffer overflow in the Solaris /usr/sbin/format command affecting Solaris 8, 9, and 10. The vulnerability can be triggered by local users who have access to the format utility (for example via the File System Management RBAC profile) and may allow arbitrary code execution. This...

CVE-2007-2529

CVE-2007-2529 affects Solaris 10 (before 20070507) with an integer signedness error in the acl (facl) system call. The underlying issue is a signedness bug in ACE_SETACL handling, enabling local users to trigger a denial of service (kernel panic) and potentially escalate privileges. Publicly docu...

CVE-2008-2144

CVE-2008-2144 affects Sun Solaris print service on Solaris 8/9/10. The underlying issues are multiple unspecified vulnerabilities in the print service that allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors. Connected patch data shows specific remedi...

CVE-2008-3426

Affected product: Sun Solaris/OpenSolaris PICLD (Platform Information and Control Library daemon) running on Solaris 8–10 and OpenSolaris builds snv_01–snv_95. Vulnerable component: picld; impact: local users can cause a denial of service that affects utilities like prtdiag, prtpicl, and prtfru. ...

CVE-2013-1530

CVE-2013-1530 corresponds to a Solaris 10 kernel vulnerability (local, privilege-escalation/availability impact). Public reference in NVD describes an unspecified local kernel issue affecting Solaris 10; Nessus plugins confirm kernel-level vulnerability in Solaris 10 (x86 and SPARC). Exploitation...

CVE-2014-6481

CVE-2014-6481 affects Oracle Solaris 10 and 11, specifically the KSSL component. The Nessus/NASL entries describe a vulnerability that allows unauthenticated, network-based attacks via SSL/TLS, potentially leading to unauthorized read access to Solaris data. Affected: Solaris 10/11 (KSSL). Root c...

CVE-2015-0429

Summary: CVE-2015-0429 affects Oracle Solaris 10 and 11, specifically the RPC Utility subcomponent. The vulnerability is described as an unspecified local issue that can impact integrity and availability when exploited by a local user. The Nessus/CPU entries confirm affected products and versions...

CVE-1999-0339

The CVE-1999-0339 issue affects Solaris’ libauth, where a buffer overflow in the library permits local users to gain additional privileges, potentially root access. Affected component: libauth on Solaris; vulnerability type: buffer overflow leading to local privilege escalation. Impact as describ...

CVE-1999-0786

The CVE-1999-0786 entry concerns the Solaris dynamic linker. Vulnerability: a local user can create arbitrary files via the LD_PROFILE environmental variable and a symlink attack affecting the dynamic linker. Affected component: Solaris dynamic linker; root cause: LD_PROFILE manipulation enabling...

CVE-1999-0840

CVE-1999-0840 affects CDE dtmail and dtmailpr; the description indicates a buffer overflow caused by a long -f option, enabling local users to gain privileges. The provided data do not specify affected versions, root cause code paths, or explicit remediation steps. Exploitation details or in-the-...

CVE-1999-0841

CVE-1999-0841 affects the CDE mailtool component. The vulnerability is a buffer overflow triggered by a long MIME Content-Type, enabling local users to gain root privileges. The available documents do not specify affected versions, exact root-cause details beyond the overflow, or any remediation/...

CVE-1999-1423

CVE-1999-1423 concerns Solaris 2.3–2.6 where a local user can trigger a denial-of-service (crash) by sending a ping to a multicast address via the loopback interface (e.g., ping -i). The vulnerability is local in scope and results in an availability impact described as PARTIAL. The records consis...

CVE-2001-0401

CVE-2001-0401 involves a buffer overflow in the Solaris tip tool on Solaris 8 and earlier. The overflow is triggered by a long HOME environment variable, allowing local users to execute arbitrary commands. The core details provided indicate the affected component is the tip program, with the root...

CVE-2001-0548

CVE-2001-0548 describes a buffer overflow in Solaris 2.6/7’s dtmail MUA triggered by the MAIL environment variable, allowing local users to gain privileges. Affected component: dtmail; impact: local privilege escalation (to the mail group). Underlying cause: insufficient boundary checking of envi...

CVE-2002-2203

Technical details of CVE-2002-2203 are not publicly available in the provided documents; no concrete information on affected products, root cause, or remediation is included. Monitor for updates.

CVE-2004-1352

CVE-2004-1352 identifies a buffer overflow in the Solaris ping daemon affecting Sun Solaris versions 7 through 9. The vulnerability enables local users to execute arbitrary code due to the overflow in the ping component. The CVE description explicitly states local code execution as the impact. No...

CVE-2007-0470

CVE-2007-0470 references multiple unknown vulnerabilities in the SunOS tip utility on Solaris 8/9/10 that enable local privilege escalation to the uucp account. The CVE is addressed by Sun patch 124998-01 for Solaris 10 x86 and 124997-01 for Solaris 10 SPARC, and related advisories note installin...

CVE-2008-2710

CVE-2008-2710 affects Sun Solaris 10 and OpenSolaris prior to SNV_92. The kernel component involved is ip_set_srcfilter in uts/common/inet/ip/ip_multi.c, where a signedness issue can trigger an out-of-bounds write via an SIOCSIPMSFILTER IOCTL with a large imsf->imsf_numsrc, enabling local user...

CVE-2011-0821

CVE-2011-0821 affects Oracle Solaris 8, 9, and 10 with an unspecified local vulnerability related to the uucp component. Connected sources confirm Solaris patching: Solaris 10 SPARC patch 146279-01 and Solaris 10 x86 patch 146280-01 address the uucp issue. The advisory context indicates local acc...

CVE-2012-3165

CVE-2012-3165 affects Oracle Solaris 8–11, specifically the mailx(1) component. The connected evidence confirms a Solaris mailx vulnerability with local access that can affect confidentiality and integrity via unknown vectors; attack requires logon and can lead to unauthorized updates/deletes and...

CVE-1999-0806

CVE-1999-0806 describes a buffer overflow in the Solaris dtprintinfo program. Connected records confirm the vulnerable component is dtprintinfo in Solaris, with the underlying flaw being a buffer overflow. The CVSS metrics indicate a local, low-complexity attack that can compromise confidentialit...

CVE-1999-1122

CVE-1999-1122 affects SunOS 4.0.3 and earlier, via a vulnerability in the restore component that enables local privilege escalation for local users. The connected PT-1989-1000 entry confirms the affected SunOS versions and notes that, at present, there is no information about a fix in newer versi...

CVE-1999-1137

CVE-1999-1137 concerns the /dev/audio device on Solaris 2.2 and earlier and SunOS 4.1.x. Permissions allow any local user to read the device, enabling potential eavesdropping on nearby conversations. Root cause: permissive read access to the audio device; affected components are the legacy Solari...

CVE-1999-1580

CVE-1999-1580 affects SunOS sendmail 5.59–5.65. The bug arises from using popen to process a forwarding host argument, enabling local users to gain root privileges by manipulating the IFS variable and passing crafted values to the -oR option. This creates a local privilege escalation vector. Publ...

CVE-2000-0118

The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...

CVE-2002-1586

Solaris 2.5.1 through 9 is affected by a local-denial-of-service due to a null-dereference in the kernel triggered by setting the sd_struiowrq variable to null in the struioget function. The available sources (CVE/NVD terms) confirm the kernel panic as the impact; no specific exploit details or p...

CVE-2003-0058

MIT Kerberos V5 KDC before 1.2.5 is vulnerable to remote authenticated DoS via a protocol request that triggers a null pointer dereference, causing KDC crashes within the same realm. Affected component: KDC in MIT Kerberos V5. Impact: service denial (crash) of KDCs in the realm. Root cause: null ...

CVE-2003-0999

CVE-2003-0999 affects Solaris 2.6–9 components: (1) lpstat and (2) the libprint library. The sources describe unknown multiple vulnerabilities that may allow an attacker to execute arbitrary code or read/write arbitrary files. The CVSS indicates local access with low complexity, no authentication...

CVE-2004-0481

The CVE-2004-0481 issue affects the Solaris KCMS package, specifically the kcms_configure script, whose logging to KCS_ClogFile can be manipulated via a symlink to corrupt arbitrary files. Affected versions include Solaris 8/9 (and possibly others as per reports). The underlying cause is untruste...

CVE-2004-1767

The Solaris kernel (versions 2.6, 7, 8, and 9) contains a local privilege escalation via a directory traversal in the vfs_getvfssw function. Unprivileged users can load their own kernel modules by crafting mount or sysfs system calls, potentially elevating privileges. Several reputable sources (S...

CVE-2006-1092

Technical details about CVE-2006-1092 are not present in the provided connected documents. Public information is limited to the existing description. Monitor for updates.

CVE-2006-5214

CVE-2006-5214 describes a race condition in the Xsession handling of X Display Manager environments affecting NetBSD, X.Org, and Solaris releases as listed; the root cause is a window between creating the user’s Xsession errors file and applying the chmod, which can let local users read other use...

CVE-2009-4080

CVE-2009-4080 affects Sun Solaris 9/10 and OpenSolaris before snv_78, via ldap_cachemgr (LDAP client configuration cache daemon). The vulnerability allows local users to trigger a denial of service (daemon crash) through vectors involving multiple serviceSearchDescriptor attributes and a getldap_...

CVE-2011-0790

CVE-2011-0790 describes an unspecified local vulnerability in Oracle Solaris 9 and 10 affecting confidentiality via wbem. The demonstrated impact is partial confidentiality with local access and no user interaction required. Exploit details are not provided in the documents. Remediation reference...

CVE-2011-0813

Technical details for CVE-2011-0813 are not publicly available in the provided documents. Please monitor for updates from official advisories; current records only indicate a local kernel-related issue in Solaris with unspecified vectors.

CVE-2012-0097

Technical details about CVE-2012-0097 are not provided in the connected documents. The sources only indicate an unspecified local confidentiality issue related to ksh93 in Oracle Solaris 11 Express. Monitor for updates.