561 matches found
CVE-1999-1580
CVE-1999-1580 affects SunOS sendmail 5.59–5.65. The bug arises from using popen to process a forwarding host argument, enabling local users to gain root privileges by manipulating the IFS variable and passing crafted values to the -oR option. This creates a local privilege escalation vector. Publ...
CVE-2004-0481
The CVE-2004-0481 issue affects the Solaris KCMS package, specifically the kcms_configure script, whose logging to KCS_ClogFile can be manipulated via a symlink to corrupt arbitrary files. Affected versions include Solaris 8/9 (and possibly others as per reports). The underlying cause is untruste...
CVE-2004-1359
CVE-2004-1359 affects Sun Solaris with uucp on versions 2.6, 7, 8, and 9. The vulnerability arises from multiple buffer overflows in uucp, allowing local users to execute arbitrary code as the uucp user. The connected documents confirm the affected component and the local-privilege impact; explic...
CVE-2006-1782
CVE-2006-1782 concerns Solaris 8/9 where a local attacker can obtain the LDAP Directory Server root DN password. The vulnerability arises when a privileged user runs idsconfig or uses insecure LDAP2 commands with -w (ldapadd, ldapdelete, ldapmodify, ldapmodrdn, ldapsearch). Documented impact is a...
CVE-2007-0470
CVE-2007-0470 references multiple unknown vulnerabilities in the SunOS tip utility on Solaris 8/9/10 that enable local privilege escalation to the uucp account. The CVE is addressed by Sun patch 124998-01 for Solaris 10 x86 and 124997-01 for Solaris 10 SPARC, and related advisories note installin...
CVE-2007-2465
CVE-2007-2465 affects Sun Solaris 9 (Solaris 9 SPARC and x86) when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes. The vulnerability reportedly allows local users to cause a denial of service (panic) via unknown vectors, possibly related ...
CVE-2011-0813
Technical details for CVE-2011-0813 are not publicly available in the provided documents. Please monitor for updates from official advisories; current records only indicate a local kernel-related issue in Solaris with unspecified vectors.
CVE-2011-0841
Oracle Solaris 11 Express is linked to CVE-2011-0841 as an unspecified TCP/IP–related vulnerability affecting availability and exploitable remotely. The connected sources lack precise affected component/version details but indicate an Oracle CPU APR2011 advisory contains this CVE among 73 fixes, ...
CVE-2011-3543
Technical details for CVE-2011-3543 are not publicly available in the provided documents; no affected products, components, versions, or remediation are detailed here. Monitor for updates.
CVE-2012-1681
CVE-2012-1681 concerns Oracle Solaris 8–11 with a vulnerability in the Kernel/sockfs component. The NVD entry notes an unspecified local vulnerability that can affect availability via unknown vectors, exploitable by a local user. Affected patches are referenced in the APR2012 CPU update (apr2012_...
CVE-2012-3122
Technical details about CVE-2012-3122 are not publicly available in the provided documents. Monitor for updates.
CVE-2013-0403
CVE-2013-0403 affects Oracle/Sun Solaris (versions 8–11) in the Solaris Utilities component. The vulnerability is described as an unspecified local issue that can affect availability and requires a logon, with exploitation deemed difficult and capable of causing partial denial of service. Nessus/...
CVE-2013-1530
CVE-2013-1530 corresponds to a Solaris 10 kernel vulnerability (local, privilege-escalation/availability impact). Public reference in NVD describes an unspecified local kernel issue affecting Solaris 10; Nessus plugins confirm kernel-level vulnerability in Solaris 10 (x86 and SPARC). Exploitation...
CVE-2013-3753
Oracle Solaris 11 is affected by CVE-2013-3753 (Kernel/STREAMS vulnerability). The issue allows remote attackers to cause a complete denial of service via TCP/IP on the network stack. The July 2013 Oracle CPU (SRU11_1_9_5_1) patches include fixes for this CVE; apply the CPU update to mitigate. Ex...
CVE-1999-0273
CVE-1999-0273 affects the Solaris 2.5.1 telnet service. A remote attacker can cause a denial of service by sending repeated ^D characters, crashing the telnet daemon and disrupting network access. The SunKill/Nessus entries corroborate that the issue is a remote DoS via the telnet service when ^D...
CVE-1999-0369
Summary: CVE-1999-0369 describes a buffer overflow in Sun’s sdtcm_convert calendar utility for OpenWindows, enabling root access. What’s affected: the Sun sdtcm_convert component used with OpenWindows; the underlying cause is a buffer overflow. Impact: local privilege escalation to root as stated...
CVE-1999-0773
CVE-1999-0773: Buffer overflow in the Solaris lpset program allows local users to gain root access. The available documents confirm the vulnerability but do not provide affected versions, exploit details, or any remediation/patch information.
CVE-1999-0973
CVE-1999-0973 describes a buffer overflow in the Solaris snoop program. An attacker can trigger the overflow by supplying a long domain name when snoop runs in verbose mode, potentially allowing remote code execution to gain root privileges. Public records consistently cite the vulnerable compone...
CVE-2001-0165
CVE-2001-0165 concerns a buffer overflow in the ximp40 shared library on Solaris 7 and Solaris 8, allowing local users to gain privileges via a long arg0 (process name) argument. Affected component: ximp40 shared library; root cause: buffer overflow. Impact: local privilege escalation with comple...
CVE-2002-1199
The CVE-2002-1199 issue affects the ypxfrd daemon used for NIS map distribution. The getdbm procedure constructs a path to /var/yp/domain/map without proper validation, allowing directory traversal via the domain and map arguments and enabling a symlink-based override that can expose files outsid...
CVE-2003-1082
CVE-2003-1082 describes a buffer overflow in utmp_update on Solaris 2.6–9 that allows local users to obtain root privileges (Sun BugID 4705891). The provided connected documents confirm the issue is a local-privilege escalation via utmp_update, with no public exploit details included in the sourc...
CVE-2005-0447
CVE-2005-0447 affects Solaris 7, 8, and 9. A remote attacker can cause a denial-of-service (hang) by sending a flood of certain ARP packets. The available sources describe the impact but do not provide patch versions or remediation steps within the provided documents. Connected documents do not a...
CVE-2005-1518
The vulnerability CVE-2005-1518 affects Solaris 7–9 when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, enabling a local user to trigger a denial-of-service by causing automountd to crash when accessing /xfn/_x500. The provided documents do not specify a vendor patch,...
CVE-2005-3099
The CVE-2005-3099 entry concerns an unspecified vulnerability in the Xsun and Xprt components of Solaris 7–10 that allows local code execution. Connected documents identify concrete remediation patches for Solaris 10: Xsun patches such as 119060-64/65, 119059-66/69, 119059-71/72/74, and 119060-73...
CVE-2005-4795
CVE-2005-4795 relates to a local privilege escalation in Solaris 7/8 due to a BCP libmle buffer overflow in the multi-language environment library (libmle), observed with the Japanese locale. Publicly documented remediation centers on Sun/Solaris patch updates: Solaris 7 (SPARC) patch 111646-01 a...
CVE-2006-3920
The CVE affects Sun Solaris TCP implementation (Solaris 8/9/10) prior to 20060726, where a TCP packet with an incorrect sequence number can trigger an ACK storm and cause remote DoS (resource exhaustion). Root cause: improper TCP sequence handling leading to ACK storm. Affected components: Solari...
CVE-2006-4307
CVE-2006-4307 affects Sun Solaris 8 and 9 (before 2006-08-21) via the format command. The vulnerability allows local users with appropriate profile (e.g., ones permitting running format with elevated privileges) to modify arbitrary files through unspecified vectors. The description does not speci...
CVE-2011-0790
CVE-2011-0790 describes an unspecified local vulnerability in Oracle Solaris 9 and 10 affecting confidentiality via wbem. The demonstrated impact is partial confidentiality with local access and no user interaction required. Exploit details are not provided in the documents. Remediation reference...
CVE-2014-4284
Technical details for CVE-2014-4284 are not publicly disclosed in the provided documents. Monitoring for updates from NVD/vendor advisories is recommended.
CVE-2014-6508
CVE-2014-6508 affects Oracle Solaris 10/11 ( Solaris component: iSCSI Data Mover IDM). The connected Nessus plugins describe the vulnerable surface as the IDM subcomponent on Solaris 10 (x86 and SPARC) and indicate that versions 10 and 11 are affected. The root cause is not explicitly detailed in...
CVE-2014-6529
CVE-2014-6529 affects Oracle Solaris 11, with the Hermon HCA PCIe driver as the vulnerable component. The vulnerability is described as unspecified in the driver, enabling remote attackers to impact confidentiality, integrity, and availability. The linked Oracle Oct2014 CPU advisory (and the Sola...
CVE-2015-0397
CVE-2015-0397 is an unspecified local vulnerability in Oracle Solaris 11, affecting the File System subcomponent and impacting availability. The vulnerability is exploited locally via unknown vectors, with a partial denial of service impact as described in the associated NASL entries for the Sola...
CVE-1999-0139
CVE-1999-0139 describes a buffer overflow in Solaris x86 mkcookie that allows local users to obtain root access. The Red Hat, EUVD, CVE, and NVD entries confirm the issue and its local-privilege-elevation impact. The provided records do not specify affected Solaris versions, exact vulnerable func...
CVE-1999-0797
CVE-1999-0797 involves the NIS finger service, where an attacker can cause a denial of service by issuing a high volume of finger requests, which leads to a flood of NIS queries. The connected documents reiterate the same description across Red Hat and CVE lists, with no concrete details about af...
CVE-1999-1191
CVE-1999-1191 : The vulnerability is a buffer overflow in the chkey utility on Solaris 2.5.1 and earlier. Triggered by a long command-line argument, it allows a local user to ignite a privilege escalation to root. In affected environments, exploitation is local and relies on overflowing the chkey...
CVE-1999-1258
CVE-1999-1258 affects SunOS 4.1.1 and earlier; the rpc.pwdauthd daemon does not properly prevent remote access, allowing remote attackers to obtain sensitive system information. The root cause is inadequate access control on the RPC daemon, leading to information disclosure. Public details in pro...
CVE-2000-0118
The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...
CVE-2001-0422
CVE-2001-0422 affects Xsun on Solaris 8 and earlier. A buffer overflow triggered by a long HOME environment variable allows local users to execute arbitrary commands. The provided documents do not include remediation details.
CVE-2002-1585
The CVE-2002-1585 entry describes an unknown vulnerability in Solaris 8 for Intel and Solaris 8/9 for SPARC that allows remote attackers to cause a denial of service by sending certain packets, which makes some network interfaces stop responding to TCP traffic. Affected products are Solaris 8 on ...
CVE-2003-0999
CVE-2003-0999 affects Solaris 2.6–9 components: (1) lpstat and (2) the libprint library. The sources describe unknown multiple vulnerabilities that may allow an attacker to execute arbitrary code or read/write arbitrary files. The CVSS indicates local access with low complexity, no authentication...
CVE-2003-1070
Technical details for CVE-2003-1070 are not publicly available in the provided documents; monitor for updates.
CVE-2003-1072
CVE-2003-1072 pertains to Solaris 8 where a memory leak in the /kernel/drv/lofi driver and the /usr/sbin/lofiadm utility can be triggered by local users, leading to kernel memory consumption and potential denial of service. The OpenVAS entries reference a Solaris Update patch 114162-01 addressing...
CVE-2004-0800
CVE-2004-0800 affects the Solaris CDE Mailer component dtmail (on Solaris 8/9). The vulnerability is a format string issue in argv[0], allowing a local user to execute arbitrary code with the privileges of the vulnerable process (typically the mail group). The CERT/NVD entries describe local code...
CVE-2004-1393
Technical details about CVE-2004-1393 are not publicly available in the provided documents. No concrete affected products, impact description, or remediation are described here. Monitor for updates as additional information is released.
CVE-2006-5012
CVE-2006-5012 affects Sun Solaris 8/9/10 via an unspecified local-privilege path that can disable syslog and block security logging. Connected documents show Solaris kernel patches addressing this CVE, including 117350-62 (SPARC Solaris 8), 117351-61 (x86 Solaris 8), and 118558-39 / 118559-39 (So...
CVE-2007-2882
CVE-2007-2882 concerns an unspecified vulnerability in the NFS client module of Sun Solaris versions 8–10 prior to the 20070524 build when the system acts as an NFS server. The issue can allow remote attackers to cause a denial of service (crash) by sending certain ACL packets. Connected advisori...
CVE-2008-0965
CVE-2008-0965 describes multiple format-string vulnerabilities in Solaris snoop in SunOS/Solaris 8–10 (OpenSolaris before snv_96). The connected Nessus/OpenVAS data identify affected components as snoop in SunOS/Solaris and reference specific patches: 138083-01 (Solaris 10 SPARC) and 138084-01 (S...
CVE-2009-4080
CVE-2009-4080 affects Sun Solaris 9/10 and OpenSolaris before snv_78, via ldap_cachemgr (LDAP client configuration cache daemon). The vulnerability allows local users to trigger a denial of service (daemon crash) through vectors involving multiple serviceSearchDescriptor attributes and a getldap_...
CVE-2011-2258
CVE-2011-2258 affects Oracle Solaris 8–11 Express via rksh (ksh) where local users could impact confidentiality, integrity, and availability. Connected patch data show Solaris 9 patches addressing the rksh/ksh vulnerability: patch 114343-16 for Solaris 9 x86 and patch 112964-18 for Solaris 9 SPAR...