CVE-2012-3122

Technical details about CVE-2012-3122 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-0413

CVE-2013-0413 is disclosed in Oracle Solaris 10 and 11 via the Apr2013 CPU advisory (SRU0). The related Nessus/SRU entries confirm this CVE affects the Solaris Remote Execution Service subcomponent (and, per SRU0, Kernel/IO) on Solaris 10 and 11. The exploit context is local, with potential to af...

CVE-2013-3753

Oracle Solaris 11 is affected by CVE-2013-3753 (Kernel/STREAMS vulnerability). The issue allows remote attackers to cause a complete denial of service via TCP/IP on the network stack. The July 2013 Oracle CPU (SRU11_1_9_5_1) patches include fixes for this CVE; apply the CPU update to mitigate. Ex...

CVE-2014-6501

CVE-2014-6501 is referenced in Oracle Solaris 11 as a local-privilege/confidentiality issue related to SSH. The connected documents provide concrete details that Solaris 11 SSH is affected and that this CVE is among fixes in the Oracle OCT2014 CPU (and a Nessus plugin notes the SSH subcomponent v...

CVE-2014-6575

Technical details for CVE-2014-6575 are not provided in the supplied documents. Public sources here show generic references and unrelated CVEs; monitor for updates.

CVE-1999-0369

Summary: CVE-1999-0369 describes a buffer overflow in Sun’s sdtcm_convert calendar utility for OpenWindows, enabling root access. What’s affected: the Sun sdtcm_convert component used with OpenWindows; the underlying cause is a buffer overflow. Impact: local privilege escalation to root as stated...

CVE-1999-0417

CVE-1999-0417 affects 64-bit Solaris 7 procfs; local users can cause a denial of service. The connected documents do not provide further technical details such as root cause, specific vulnerable versions beyond Solaris 7, exploit information, or a remediation/fix.

CVE-1999-0689

The CVE-1999-0689 entries describe a vulnerability in the CDE dtspcd daemon where local users can trigger arbitrary command execution through a symlink attack. The connected Red Hat and CVE records repeat the same description. The sources do not provide specific affected versions, vendor/product ...

CVE-1999-1137

CVE-1999-1137 concerns the /dev/audio device on Solaris 2.2 and earlier and SunOS 4.1.x. Permissions allow any local user to read the device, enabling potential eavesdropping on nearby conversations. Root cause: permissive read access to the audio device; affected components are the legacy Solari...

CVE-1999-1191

CVE-1999-1191 : The vulnerability is a buffer overflow in the chkey utility on Solaris 2.5.1 and earlier. Triggered by a long command-line argument, it allows a local user to ignite a privilege escalation to root. In affected environments, exploitation is local and relies on overflowing the chkey...

CVE-2000-0118

The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...

CVE-2002-1199

The CVE-2002-1199 issue affects the ypxfrd daemon used for NIS map distribution. The getdbm procedure constructs a path to /var/yp/domain/map without proper validation, allowing directory traversal via the domain and map arguments and enabling a symlink-based override that can expose files outsid...

CVE-2002-1585

The CVE-2002-1585 entry describes an unknown vulnerability in Solaris 8 for Intel and Solaris 8/9 for SPARC that allows remote attackers to cause a denial of service by sending certain packets, which makes some network interfaces stop responding to TCP traffic. Affected products are Solaris 8 on ...

CVE-2003-0092

CVE-2003-0092 describes a heap-based buffer overflow in Solaris dtsession (Sun Solaris 2.5.1–9) that allows local users to gain root privileges by supplying a long HOME environment variable. The issue arises from an inadequate length check in handling HOME, enabling arbitrary code execution with ...

CVE-2003-1082

CVE-2003-1082 describes a buffer overflow in utmp_update on Solaris 2.6–9 that allows local users to obtain root privileges (Sun BugID 4705891). The provided connected documents confirm the issue is a local-privilege escalation via utmp_update, with no public exploit details included in the sourc...

CVE-2004-1352

CVE-2004-1352 identifies a buffer overflow in the Solaris ping daemon affecting Sun Solaris versions 7 through 9. The vulnerability enables local users to execute arbitrary code due to the overflow in the ping component. The CVE description explicitly states local code execution as the impact. No...

CVE-2005-4795

CVE-2005-4795 relates to a local privilege escalation in Solaris 7/8 due to a BCP libmle buffer overflow in the multi-language environment library (libmle), observed with the Japanese locale. Publicly documented remediation centers on Sun/Solaris patch updates: Solaris 7 (SPARC) patch 111646-01 a...

CVE-2006-3920

The CVE affects Sun Solaris TCP implementation (Solaris 8/9/10) prior to 20060726, where a TCP packet with an incorrect sequence number can trigger an ACK storm and cause remote DoS (resource exhaustion). Root cause: improper TCP sequence handling leading to ACK storm. Affected components: Solari...

CVE-2006-4307

CVE-2006-4307 affects Sun Solaris 8 and 9 (before 2006-08-21) via the format command. The vulnerability allows local users with appropriate profile (e.g., ones permitting running format with elevated privileges) to modify arbitrary files through unspecified vectors. The description does not speci...

CVE-2009-4080

CVE-2009-4080 affects Sun Solaris 9/10 and OpenSolaris before snv_78, via ldap_cachemgr (LDAP client configuration cache daemon). The vulnerability allows local users to trigger a denial of service (daemon crash) through vectors involving multiple serviceSearchDescriptor attributes and a getldap_...

CVE-2011-0813

Technical details for CVE-2011-0813 are not publicly available in the provided documents. Please monitor for updates from official advisories; current records only indicate a local kernel-related issue in Solaris with unspecified vectors.

CVE-2012-1750

CVE-2012-1750 affects Oracle Solaris 8–11 in the mailx(1) component. The vulnerability is described as unspecified with local access required to affect confidentiality, integrity, and availability; no exploit details are provided in the sources. Remediation is indicated by Oracle’s July 2012 CPU ...

CVE-2013-1530

CVE-2013-1530 corresponds to a Solaris 10 kernel vulnerability (local, privilege-escalation/availability impact). Public reference in NVD describes an unspecified local kernel issue affecting Solaris 10; Nessus plugins confirm kernel-level vulnerability in Solaris 10 (x86 and SPARC). Exploitation...

CVE-2013-3752

CVE-2013-3752 is a Solaris 11 vulnerability tied to the Service Management Facility (SMF). The Nessus issue bundle notes the Solaris SRU0 patch set for July 2013 addresses an SMF-related flaw affecting Solaris 11, with exploitation via a network vector reported as unauthenticated. The impact desc...

CVE-2014-4284

Technical details for CVE-2014-4284 are not publicly disclosed in the provided documents. Monitoring for updates from NVD/vendor advisories is recommended.

CVE-2014-6508

CVE-2014-6508 affects Oracle Solaris 10/11 ( Solaris component: iSCSI Data Mover IDM). The connected Nessus plugins describe the vulnerable surface as the IDM subcomponent on Solaris 10 (x86 and SPARC) and indicate that versions 10 and 11 are affected. The root cause is not explicitly detailed in...

CVE-2015-0397

CVE-2015-0397 is an unspecified local vulnerability in Oracle Solaris 11, affecting the File System subcomponent and impacting availability. The vulnerability is exploited locally via unknown vectors, with a partial denial of service impact as described in the associated NASL entries for the Sola...

CVE-1999-0139

CVE-1999-0139 describes a buffer overflow in Solaris x86 mkcookie that allows local users to obtain root access. The Red Hat, EUVD, CVE, and NVD entries confirm the issue and its local-privilege-elevation impact. The provided records do not specify affected Solaris versions, exact vulnerable func...

CVE-1999-0273

CVE-1999-0273 affects the Solaris 2.5.1 telnet service. A remote attacker can cause a denial of service by sending repeated ^D characters, crashing the telnet daemon and disrupting network access. The SunKill/Nessus entries corroborate that the issue is a remote DoS via the telnet service when ^D...

CVE-1999-0773

CVE-1999-0773: Buffer overflow in the Solaris lpset program allows local users to gain root access. The available documents confirm the vulnerability but do not provide affected versions, exploit details, or any remediation/patch information.

CVE-1999-0973

CVE-1999-0973 describes a buffer overflow in the Solaris snoop program. An attacker can trigger the overflow by supplying a long domain name when snoop runs in verbose mode, potentially allowing remote code execution to gain root privileges. Public records consistently cite the vulnerable compone...

CVE-2001-0421

The CVE-2001-0421 issue affects the Solaris FTP server (Solaris 8 and earlier). The vulnerability arises when an authenticated/invalid password sequence is followed by a CWD ~ command, which can trigger a core dump in the root directory and may lead to leaking sensitive data (e.g., shadowed passw...

CVE-2001-0422

CVE-2001-0422 affects Xsun on Solaris 8 and earlier. A buffer overflow triggered by a long HOME environment variable allows local users to execute arbitrary commands. The provided documents do not include remediation details.

CVE-2003-1072

CVE-2003-1072 pertains to Solaris 8 where a memory leak in the /kernel/drv/lofi driver and the /usr/sbin/lofiadm utility can be triggered by local users, leading to kernel memory consumption and potential denial of service. The OpenVAS entries reference a Solaris Update patch 114162-01 addressing...

CVE-2005-0447

CVE-2005-0447 affects Solaris 7, 8, and 9. A remote attacker can cause a denial-of-service (hang) by sending a flood of certain ARP packets. The available sources describe the impact but do not provide patch versions or remediation steps within the provided documents. Connected documents do not a...

CVE-2005-1518

The vulnerability CVE-2005-1518 affects Solaris 7–9 when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, enabling a local user to trigger a denial-of-service by causing automountd to crash when accessing /xfn/_x500. The provided documents do not specify a vendor patch,...

CVE-2005-3099

The CVE-2005-3099 entry concerns an unspecified vulnerability in the Xsun and Xprt components of Solaris 7–10 that allows local code execution. Connected documents identify concrete remediation patches for Solaris 10: Xsun patches such as 119060-64/65, 119059-66/69, 119059-71/72/74, and 119060-73...

CVE-2006-1780

CVE-2006-1780 is a local DoS in the Bourne shell on SunOS/Solaris (Solaris 8, 9, 10) caused by a flaw during temporary-file creation that makes sh (and related shells like jsh/rsh/pfsh) crash. Connected advisories reference Solaris patch updates: 109324-10/109325-10 for Solaris 8, 9; 118535-06/11...

CVE-2007-0165

CVE-2007-0165 concerns a remote DoS in Sun Solaris 8/9 via malformed RPC requests that crash rpcbind through libnsl. The connected OpenVAS/Nessus references discuss rpcbind DoS in HP-UX and patch checks, but there are no Solaris-specific versioned fixes or root-cause details in the connected docu...

CVE-2007-2882

CVE-2007-2882 concerns an unspecified vulnerability in the NFS client module of Sun Solaris versions 8–10 prior to the 20070524 build when the system acts as an NFS server. The issue can allow remote attackers to cause a denial of service (crash) by sending certain ACL packets. Connected advisori...

CVE-2008-0965

CVE-2008-0965 describes multiple format-string vulnerabilities in Solaris snoop in SunOS/Solaris 8–10 (OpenSolaris before snv_96). The connected Nessus/OpenVAS data identify affected components as snoop in SunOS/Solaris and reference specific patches: 138083-01 (Solaris 10 SPARC) and 138084-01 (S...

CVE-2011-2258

CVE-2011-2258 affects Oracle Solaris 8–11 Express via rksh (ksh) where local users could impact confidentiality, integrity, and availability. Connected patch data show Solaris 9 patches addressing the rksh/ksh vulnerability: patch 114343-16 for Solaris 9 x86 and patch 112964-18 for Solaris 9 SPAR...

CVE-2011-2259

Technical details about CVE-2011-2259 are not publicly provided in the supplied documents; records only indicate an unspecified local vulnerability in Oracle Solaris UFS affecting availability. Monitor for updates in official advisories.

CVE-2011-2313

Technical details for CVE-2011-2313 are not publicly available in the provided documents. Monitor for updates.

CVE-2012-0569

CVE-2012-0569 affects Oracle Solaris 10 (x86 and SPARC) via the Solaris Install/smpatch component. The vulnerability, described in various Nessus/NVD records, implies that local attackers can indirectly affect confidentiality and integrity with partial impact, requiring at least local logon and u...

CVE-2012-1681

CVE-2012-1681 concerns Oracle Solaris 8–11 with a vulnerability in the Kernel/sockfs component. The NVD entry notes an unspecified local vulnerability that can affect availability via unknown vectors, exploitable by a local user. Affected patches are referenced in the APR2012 CPU update (apr2012_...

CVE-2012-1683

Summary (CVE-2012-1683): Affected software: Oracle Solaris 8, 9, 10, 11. Vulnerable component: gssd(1M) in the Solaris userland; root cause details are not publicly provided in the materials. Impact: local users can affect confidentiality, integrity, and availability; escalation to complete OS ta...

CVE-2013-0405

CVE-2013-0405 affects Oracle Solaris 8–11 with the Solaris Filesystem/NFS component. The vulnerability is triggered when the NFS client mounts the server over IPv6, enabling unauthenticated network access that can lead to unauthorized updates/deletes and read access to Solaris data; impact is con...

CVE-2014-6529

CVE-2014-6529 affects Oracle Solaris 11, with the Hermon HCA PCIe driver as the vulnerable component. The vulnerability is described as unspecified in the driver, enabling remote attackers to impact confidentiality, integrity, and availability. The linked Oracle Oct2014 CPU advisory (and the Sola...

CVE-2015-0430

CVE-2015-0430 affects Oracle Solaris 10/11 RPC Utility. The Solaris RPC System component is vulnerable due to an unspecified issue in RPC Utility that can allow a local user to affect confidentiality (partial exposure) with not widely exploitable conditions. Affected versions include Solaris 10 a...