CVE-1999-0223

CVE-1999-0223 describes a crash in Solaris syslogd when it processes a message from a host that lacks an inverse DNS entry. The issue is tied to the syslogd service on Solaris; the root cause is the handling of such messages, leading to a crash. Public references (NVD entry) indicate an impact on...

CVE-1999-0786

The CVE-1999-0786 entry concerns the Solaris dynamic linker. Vulnerability: a local user can create arbitrary files via the LD_PROFILE environmental variable and a symlink attack affecting the dynamic linker. Affected component: Solaris dynamic linker; root cause: LD_PROFILE manipulation enabling...

CVE-1999-0841

CVE-1999-0841 affects the CDE mailtool component. The vulnerability is a buffer overflow triggered by a long MIME Content-Type, enabling local users to gain root privileges. The available documents do not specify affected versions, exact root-cause details beyond the overflow, or any remediation/...

CVE-1999-0974

The CVE-1999-0974 entry describes a vulnerability in Solaris snoop, where a buffer overflow is triggered by GETQUOTA requests to the rpc.rquotad service. The underlying issue allows remote attackers to gain root privileges on affected systems. Documents consistently identify the vulnerable compon...

CVE-2001-0115

The CVE describes a buffer overflow in the arp command on Solaris 7 and earlier, exploitable locally via a long -f parameter. Affected component: arp. Root cause: inadequate bounds checking in the -f option. Impact, as per the sources: complete confidentiality, integrity, and availability losses ...

CVE-2001-0269

The vulnerability CVE-2001-0269 affects the pam_ldap authentication module in Solaris 8, where remote attackers can bypass authentication by providing a NULL password. This leads to complete compromise of confidentiality, integrity, and availability for affected sessions. The available documents ...

CVE-2002-0797

CVE-2002-0797 : The vulnerability affects Solaris 5.6–8 running the MIB parsing component of mibiisa. A buffer overflow in this component may allow a remote attacker to gain root privileges. The issue is documented in NVD/Nessus references as a remote overflow potentially enabling a root shell. N...

CVE-2002-2203

Technical details of CVE-2002-2203 are not publicly available in the provided documents; no concrete information on affected products, root cause, or remediation is included. Monitor for updates.

CVE-2005-3781

The CVE-2005-3781 issue affects Solaris 9’s in.named and is described as a denial‑of‑service via manipulation causing unnecessary queries. Connected sources identify concrete remediation: SunOS 5.9 SPARC needs patch 112970-12 and SunOS 5.9 x86 needs patch 114354-11 to address libresolv. The exact...

CVE-2006-0227

The CVE-2006-0227 entry concerns Sun Solaris 8, 9, and 10 where the lpsched component is affected. The documentation indicates multiple unspecified vulnerabilities in lpsched that could allow a local user to delete arbitrary files or disable the LP print service, with attack vectors described as ...

CVE-2006-4319

CVE-2006-4319 is a buffer overflow in the Solaris /usr/sbin/format command affecting Solaris 8, 9, and 10. The vulnerability can be triggered by local users who have access to the format utility (for example via the File System Management RBAC profile) and may allow arbitrary code execution. This...

CVE-2007-2529

CVE-2007-2529 affects Solaris 10 (before 20070507) with an integer signedness error in the acl (facl) system call. The underlying issue is a signedness bug in ACE_SETACL handling, enabling local users to trigger a denial of service (kernel panic) and potentially escalate privileges. Publicly docu...

CVE-2008-2144

CVE-2008-2144 affects Sun Solaris print service on Solaris 8/9/10. The underlying issues are multiple unspecified vulnerabilities in the print service that allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors. Connected patch data shows specific remedi...

CVE-2008-3426

Affected product: Sun Solaris/OpenSolaris PICLD (Platform Information and Control Library daemon) running on Solaris 8–10 and OpenSolaris builds snv_01–snv_95. Vulnerable component: picld; impact: local users can cause a denial of service that affects utilities like prtdiag, prtpicl, and prtfru. ...

CVE-2011-0821

CVE-2011-0821 affects Oracle Solaris 8, 9, and 10 with an unspecified local vulnerability related to the uucp component. Connected sources confirm Solaris patching: Solaris 10 SPARC patch 146279-01 and Solaris 10 x86 patch 146280-01 address the uucp issue. The advisory context indicates local acc...

CVE-2011-2298

Technical details about CVE-2011-2298 are not publicly available in the provided documents. Monitor for updates in linked advisories and databases.

CVE-2013-3837

CVE-2013-3837 affects Oracle Solaris 10 and Solaris 11.1 in the Solaris component Cacao. The vulnerability allows unauthenticated network attacks (via SNMP) that can cause a partial denial of service. The CVE is listed in the Oct 2013 Oracle CPU and is addressed by the oct2013_SRU11_1_12_5_0 patc...

CVE-2014-6481

CVE-2014-6481 affects Oracle Solaris 10 and 11, specifically the KSSL component. The Nessus/NASL entries describe a vulnerability that allows unauthenticated, network-based attacks via SSL/TLS, potentially leading to unauthorized read access to Solaris data. Affected: Solaris 10/11 (KSSL). Root c...

CVE-1999-0303

CVE-1999-0303 describes a buffer overflow in the BNU UUCP daemon (uucpd) triggered by long hostnames. The issue affects the BNU UUCP daemon and is caused by improper handling of hostname lengths, with CVSS metrics indicating a local, low-complexity attack that could impact confidentiality, integr...

CVE-1999-0339

The CVE-1999-0339 issue affects Solaris’ libauth, where a buffer overflow in the library permits local users to gain additional privileges, potentially root access. Affected component: libauth on Solaris; vulnerability type: buffer overflow leading to local privilege escalation. Impact as describ...

CVE-1999-0689

The CVE-1999-0689 entries describe a vulnerability in the CDE dtspcd daemon where local users can trigger arbitrary command execution through a symlink attack. The connected Red Hat and CVE records repeat the same description. The sources do not provide specific affected versions, vendor/product ...

CVE-1999-0795

CVE-1999-0795 concerns the NIS+ rpc.nisd server, which is affected by an unauthenticated remote RPC-call execution vulnerability. The Red Hat and NVD records describe that remote attackers can trigger certain RPC calls to obtain system information, disable logging, or modify caches via the NIS+ s...

CVE-1999-0806

CVE-1999-0806 describes a buffer overflow in the Solaris dtprintinfo program. Connected records confirm the vulnerable component is dtprintinfo in Solaris, with the underlying flaw being a buffer overflow. The CVSS metrics indicate a local, low-complexity attack that can compromise confidentialit...

CVE-1999-0840

CVE-1999-0840 affects CDE dtmail and dtmailpr; the description indicates a buffer overflow caused by a long -f option, enabling local users to gain privileges. The provided data do not specify affected versions, root cause code paths, or explicit remediation steps. Exploitation details or in-the-...

CVE-1999-1423

CVE-1999-1423 concerns Solaris 2.3–2.6 where a local user can trigger a denial-of-service (crash) by sending a ping to a multicast address via the loopback interface (e.g., ping -i). The vulnerability is local in scope and results in an availability impact described as PARTIAL. The records consis...

CVE-2001-0401

CVE-2001-0401 involves a buffer overflow in the Solaris tip tool on Solaris 8 and earlier. The overflow is triggered by a long HOME environment variable, allowing local users to execute arbitrary commands. The core details provided indicate the affected component is the tip program, with the root...

CVE-2001-0548

CVE-2001-0548 describes a buffer overflow in Solaris 2.6/7’s dtmail MUA triggered by the MAIL environment variable, allowing local users to gain privileges. Affected component: dtmail; impact: local privilege escalation (to the mail group). Underlying cause: insufficient boundary checking of envi...

CVE-2004-1354

CVE-2004-1354 affects the Solaris Management Console (SMC) in Sun Solaris 8 and 9. The issue arises because SMC generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive informa...

CVE-2008-2710

CVE-2008-2710 affects Sun Solaris 10 and OpenSolaris prior to SNV_92. The kernel component involved is ip_set_srcfilter in uts/common/inet/ip/ip_multi.c, where a signedness issue can trigger an out-of-bounds write via an SIOCSIPMSFILTER IOCTL with a large imsf->imsf_numsrc, enabling local user...

CVE-2012-0097

Technical details about CVE-2012-0097 are not provided in the connected documents. The sources only indicate an unspecified local confidentiality issue related to ksh93 in Oracle Solaris 11 Express. Monitor for updates.

CVE-2012-0100

CVE-2012-0100 affects Oracle Solaris 9/10/11 Express with a local privilege escalation via the Kerberos component. Connected advisories confirm Solaris 10 SPARC patch 144891-02 and Solaris 10 x86 patch 144892-02 mitigate this issue by updating libss.so.1. Public details describe a local vulnerabi...

CVE-2012-1765

CVE-2012-1765 affects Oracle Sun Solaris 10, specifically the Branded Zone component. The vulnerability is described as an unspecified local integrity issue within Branded Zone that can enable a local attacker to write to arbitrary OS locations. Exploitation requires local access (logon) to the o...

CVE-2012-3165

CVE-2012-3165 affects Oracle Solaris 8–11, specifically the mailx(1) component. The connected evidence confirms a Solaris mailx vulnerability with local access that can affect confidentiality and integrity via unknown vectors; attack requires logon and can lead to unauthorized updates/deletes and...

CVE-2014-6497

CVE-2014-6497 affects Oracle Solaris 11 kernel components. The vulnerability is local to the kernel and can affect availability. The connected sources confirm this CVE is included in Solaris oct2014 CPU advisories; remediation involves applying the corresponding security updates from the Oracle C...

CVE-2014-6501

CVE-2014-6501 is referenced in Oracle Solaris 11 as a local-privilege/confidentiality issue related to SSH. The connected documents provide concrete details that Solaris 11 SSH is affected and that this CVE is among fixes in the Oracle OCT2014 CPU (and a Nessus plugin notes the SSH subcomponent v...

CVE-1999-0185

The CVE-1999-0185 entry concerns SunOS/Solaris where a remote user could leverage an FTP server’s data port to connect to an rlogin server on a host that trusts the FTP server, enabling remote command execution. The vulnerability arises from an insecure trust relationship between the FTP data pat...

CVE-1999-1122

CVE-1999-1122 affects SunOS 4.0.3 and earlier, via a vulnerability in the restore component that enables local privilege escalation for local users. The connected PT-1989-1000 entry confirms the affected SunOS versions and notes that, at present, there is no information about a fix in newer versi...

CVE-1999-1438

CVE-1999-1438 affects SunOS 4.1.1 and earlier, with a vulnerability in the /bin/mail executable that allows local users to gain root privileges via certain command line arguments. The PT-1991-1012 entry confirms the affected software and behavior, but notes there is no information about a fix for...

CVE-1999-1580

CVE-1999-1580 affects SunOS sendmail 5.59–5.65. The bug arises from using popen to process a forwarding host argument, enabling local users to gain root privileges by manipulating the IFS variable and passing crafted values to the -oR option. This creates a local privilege escalation vector. Publ...

CVE-2002-1586

Solaris 2.5.1 through 9 is affected by a local-denial-of-service due to a null-dereference in the kernel triggered by setting the sd_struiowrq variable to null in the struioget function. The available sources (CVE/NVD terms) confirm the kernel panic as the impact; no specific exploit details or p...

CVE-2003-0058

MIT Kerberos V5 KDC before 1.2.5 is vulnerable to remote authenticated DoS via a protocol request that triggers a null pointer dereference, causing KDC crashes within the same realm. Affected component: KDC in MIT Kerberos V5. Impact: service denial (crash) of KDCs in the realm. Root cause: null ...

CVE-2003-1067

CVE-2003-1067 involves multiple buffer overflows in Solaris’ dbm_open (used by ndbm/dbm) and dbminit functions, affecting Solaris 2.6 through 9. The underlying flaw enables local users to gain root privileges via long arguments to Xsun or other programs that invoke these functions. The connected ...

CVE-2004-1352

CVE-2004-1352 identifies a buffer overflow in the Solaris ping daemon affecting Sun Solaris versions 7 through 9. The vulnerability enables local users to execute arbitrary code due to the overflow in the ping component. The CVE description explicitly states local code execution as the impact. No...

CVE-2004-1767

The Solaris kernel (versions 2.6, 7, 8, and 9) contains a local privilege escalation via a directory traversal in the vfs_getvfssw function. Unprivileged users can load their own kernel modules by crafting mount or sysfs system calls, potentially elevating privileges. Several reputable sources (S...

CVE-2005-1591

Technical details for CVE-2005-1591 are not publicly provided in the supplied documents; no affected products, vectors, or fixes are specified. Monitor for updates.

CVE-2006-1092

Technical details about CVE-2006-1092 are not present in the provided connected documents. Public information is limited to the existing description. Monitor for updates.

CVE-2006-5214

CVE-2006-5214 describes a race condition in the Xsession handling of X Display Manager environments affecting NetBSD, X.Org, and Solaris releases as listed; the root cause is a window between creating the user’s Xsession errors file and applying the chmod, which can let local users read other use...

CVE-2011-0813

Technical details for CVE-2011-0813 are not publicly available in the provided documents. Please monitor for updates from official advisories; current records only indicate a local kernel-related issue in Solaris with unspecified vectors.

CVE-2012-1681

CVE-2012-1681 concerns Oracle Solaris 8–11 with a vulnerability in the Kernel/sockfs component. The NVD entry notes an unspecified local vulnerability that can affect availability via unknown vectors, exploitable by a local user. Affected patches are referenced in the APR2012 CPU update (apr2012_...

CVE-2013-0403

CVE-2013-0403 affects Oracle/Sun Solaris (versions 8–11) in the Solaris Utilities component. The vulnerability is described as an unspecified local issue that can affect availability and requires a logon, with exploitation deemed difficult and capable of causing partial denial of service. Nessus/...