CVE-1999-0273

CVE-1999-0273 affects the Solaris 2.5.1 telnet service. A remote attacker can cause a denial of service by sending repeated ^D characters, crashing the telnet daemon and disrupting network access. The SunKill/Nessus entries corroborate that the issue is a remote DoS via the telnet service when ^D...

CVE-1999-0369

Summary: CVE-1999-0369 describes a buffer overflow in Sun’s sdtcm_convert calendar utility for OpenWindows, enabling root access. What’s affected: the Sun sdtcm_convert component used with OpenWindows; the underlying cause is a buffer overflow. Impact: local privilege escalation to root as stated...

CVE-1999-0417

CVE-1999-0417 affects 64-bit Solaris 7 procfs; local users can cause a denial of service. The connected documents do not provide further technical details such as root cause, specific vulnerable versions beyond Solaris 7, exploit information, or a remediation/fix.

CVE-1999-1122

CVE-1999-1122 affects SunOS 4.0.3 and earlier, via a vulnerability in the restore component that enables local privilege escalation for local users. The connected PT-1989-1000 entry confirms the affected SunOS versions and notes that, at present, there is no information about a fix in newer versi...

CVE-1999-1137

CVE-1999-1137 concerns the /dev/audio device on Solaris 2.2 and earlier and SunOS 4.1.x. Permissions allow any local user to read the device, enabling potential eavesdropping on nearby conversations. Root cause: permissive read access to the audio device; affected components are the legacy Solari...

CVE-2001-0548

CVE-2001-0548 describes a buffer overflow in Solaris 2.6/7’s dtmail MUA triggered by the MAIL environment variable, allowing local users to gain privileges. Affected component: dtmail; impact: local privilege escalation (to the mail group). Underlying cause: insufficient boundary checking of envi...

CVE-2004-1352

CVE-2004-1352 identifies a buffer overflow in the Solaris ping daemon affecting Sun Solaris versions 7 through 9. The vulnerability enables local users to execute arbitrary code due to the overflow in the ping component. The CVE description explicitly states local code execution as the impact. No...

CVE-2005-4795

CVE-2005-4795 relates to a local privilege escalation in Solaris 7/8 due to a BCP libmle buffer overflow in the multi-language environment library (libmle), observed with the Japanese locale. Publicly documented remediation centers on Sun/Solaris patch updates: Solaris 7 (SPARC) patch 111646-01 a...

CVE-2006-3920

The CVE affects Sun Solaris TCP implementation (Solaris 8/9/10) prior to 20060726, where a TCP packet with an incorrect sequence number can trigger an ACK storm and cause remote DoS (resource exhaustion). Root cause: improper TCP sequence handling leading to ACK storm. Affected components: Solari...

CVE-2007-2465

CVE-2007-2465 affects Sun Solaris 9 (Solaris 9 SPARC and x86) when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes. The vulnerability reportedly allows local users to cause a denial of service (panic) via unknown vectors, possibly related ...

CVE-2011-0790

CVE-2011-0790 describes an unspecified local vulnerability in Oracle Solaris 9 and 10 affecting confidentiality via wbem. The demonstrated impact is partial confidentiality with local access and no user interaction required. Exploit details are not provided in the documents. Remediation reference...

CVE-2012-3122

Technical details about CVE-2012-3122 are not publicly available in the provided documents. Monitor for updates.

CVE-2013-3753

Oracle Solaris 11 is affected by CVE-2013-3753 (Kernel/STREAMS vulnerability). The issue allows remote attackers to cause a complete denial of service via TCP/IP on the network stack. The July 2013 Oracle CPU (SRU11_1_9_5_1) patches include fixes for this CVE; apply the CPU update to mitigate. Ex...

CVE-2014-4284

Technical details for CVE-2014-4284 are not publicly disclosed in the provided documents. Monitoring for updates from NVD/vendor advisories is recommended.

CVE-2014-6529

CVE-2014-6529 affects Oracle Solaris 11, with the Hermon HCA PCIe driver as the vulnerable component. The vulnerability is described as unspecified in the driver, enabling remote attackers to impact confidentiality, integrity, and availability. The linked Oracle Oct2014 CPU advisory (and the Sola...

CVE-2014-6575

Technical details for CVE-2014-6575 are not provided in the supplied documents. Public sources here show generic references and unrelated CVEs; monitor for updates.

CVE-2015-0397

CVE-2015-0397 is an unspecified local vulnerability in Oracle Solaris 11, affecting the File System subcomponent and impacting availability. The vulnerability is exploited locally via unknown vectors, with a partial denial of service impact as described in the associated NASL entries for the Sola...

CVE-1999-0139

CVE-1999-0139 describes a buffer overflow in Solaris x86 mkcookie that allows local users to obtain root access. The Red Hat, EUVD, CVE, and NVD entries confirm the issue and its local-privilege-elevation impact. The provided records do not specify affected Solaris versions, exact vulnerable func...

CVE-1999-0689

The CVE-1999-0689 entries describe a vulnerability in the CDE dtspcd daemon where local users can trigger arbitrary command execution through a symlink attack. The connected Red Hat and CVE records repeat the same description. The sources do not provide specific affected versions, vendor/product ...

CVE-1999-0973

CVE-1999-0973 describes a buffer overflow in the Solaris snoop program. An attacker can trigger the overflow by supplying a long domain name when snoop runs in verbose mode, potentially allowing remote code execution to gain root privileges. Public records consistently cite the vulnerable compone...

CVE-1999-1191

CVE-1999-1191 : The vulnerability is a buffer overflow in the chkey utility on Solaris 2.5.1 and earlier. Triggered by a long command-line argument, it allows a local user to ignite a privilege escalation to root. In affected environments, exploitation is local and relies on overflowing the chkey...

CVE-1999-1438

CVE-1999-1438 affects SunOS 4.1.1 and earlier, with a vulnerability in the /bin/mail executable that allows local users to gain root privileges via certain command line arguments. The PT-1991-1012 entry confirms the affected software and behavior, but notes there is no information about a fix for...

CVE-2000-0118

The CVE-2000-0118 entry concerns the Red Hat Linux su program: when the su process is killed before its timeout, failed password guesses aren’t logged, enabling local brute-force password guessing. The affected component is the su utility; the root cause is failure to log failed attempts due to p...

CVE-2002-1199

The CVE-2002-1199 issue affects the ypxfrd daemon used for NIS map distribution. The getdbm procedure constructs a path to /var/yp/domain/map without proper validation, allowing directory traversal via the domain and map arguments and enabling a symlink-based override that can expose files outsid...

CVE-2002-1585

The CVE-2002-1585 entry describes an unknown vulnerability in Solaris 8 for Intel and Solaris 8/9 for SPARC that allows remote attackers to cause a denial of service by sending certain packets, which makes some network interfaces stop responding to TCP traffic. Affected products are Solaris 8 on ...

CVE-2003-1082

CVE-2003-1082 describes a buffer overflow in utmp_update on Solaris 2.6–9 that allows local users to obtain root privileges (Sun BugID 4705891). The provided connected documents confirm the issue is a local-privilege escalation via utmp_update, with no public exploit details included in the sourc...

CVE-2005-0447

CVE-2005-0447 affects Solaris 7, 8, and 9. A remote attacker can cause a denial-of-service (hang) by sending a flood of certain ARP packets. The available sources describe the impact but do not provide patch versions or remediation steps within the provided documents. Connected documents do not a...

CVE-2005-1518

The vulnerability CVE-2005-1518 affects Solaris 7–9 when using Federated Naming Services (FNS), autofs, and FNS X.500 configuration, enabling a local user to trigger a denial-of-service by causing automountd to crash when accessing /xfn/_x500. The provided documents do not specify a vendor patch,...

CVE-2006-4307

CVE-2006-4307 affects Sun Solaris 8 and 9 (before 2006-08-21) via the format command. The vulnerability allows local users with appropriate profile (e.g., ones permitting running format with elevated privileges) to modify arbitrary files through unspecified vectors. The description does not speci...

CVE-2008-0965

CVE-2008-0965 describes multiple format-string vulnerabilities in Solaris snoop in SunOS/Solaris 8–10 (OpenSolaris before snv_96). The connected Nessus/OpenVAS data identify affected components as snoop in SunOS/Solaris and reference specific patches: 138083-01 (Solaris 10 SPARC) and 138084-01 (S...

CVE-2009-4080

CVE-2009-4080 affects Sun Solaris 9/10 and OpenSolaris before snv_78, via ldap_cachemgr (LDAP client configuration cache daemon). The vulnerability allows local users to trigger a denial of service (daemon crash) through vectors involving multiple serviceSearchDescriptor attributes and a getldap_...

CVE-2011-2258

CVE-2011-2258 affects Oracle Solaris 8–11 Express via rksh (ksh) where local users could impact confidentiality, integrity, and availability. Connected patch data show Solaris 9 patches addressing the rksh/ksh vulnerability: patch 114343-16 for Solaris 9 x86 and patch 112964-18 for Solaris 9 SPAR...

CVE-2011-2313

Technical details for CVE-2011-2313 are not publicly available in the provided documents. Monitor for updates.

CVE-2012-0569

CVE-2012-0569 affects Oracle Solaris 10 (x86 and SPARC) via the Solaris Install/smpatch component. The vulnerability, described in various Nessus/NVD records, implies that local attackers can indirectly affect confidentiality and integrity with partial impact, requiring at least local logon and u...

CVE-2012-1683

Summary (CVE-2012-1683): Affected software: Oracle Solaris 8, 9, 10, 11. Vulnerable component: gssd(1M) in the Solaris userland; root cause details are not publicly provided in the materials. Impact: local users can affect confidentiality, integrity, and availability; escalation to complete OS ta...

CVE-2012-1750

CVE-2012-1750 affects Oracle Solaris 8–11 in the mailx(1) component. The vulnerability is described as unspecified with local access required to affect confidentiality, integrity, and availability; no exploit details are provided in the sources. Remediation is indicated by Oracle’s July 2012 CPU ...

CVE-2013-0405

CVE-2013-0405 affects Oracle Solaris 8–11 with the Solaris Filesystem/NFS component. The vulnerability is triggered when the NFS client mounts the server over IPv6, enabling unauthenticated network access that can lead to unauthorized updates/deletes and read access to Solaris data; impact is con...

CVE-2013-1530

CVE-2013-1530 corresponds to a Solaris 10 kernel vulnerability (local, privilege-escalation/availability impact). Public reference in NVD describes an unspecified local kernel issue affecting Solaris 10; Nessus plugins confirm kernel-level vulnerability in Solaris 10 (x86 and SPARC). Exploitation...

CVE-2013-3752

CVE-2013-3752 is a Solaris 11 vulnerability tied to the Service Management Facility (SMF). The Nessus issue bundle notes the Solaris SRU0 patch set for July 2013 addresses an SMF-related flaw affecting Solaris 11, with exploitation via a network vector reported as unauthenticated. The impact desc...

CVE-2014-6508

CVE-2014-6508 affects Oracle Solaris 10/11 ( Solaris component: iSCSI Data Mover IDM). The connected Nessus plugins describe the vulnerable surface as the IDM subcomponent on Solaris 10 (x86 and SPARC) and indicate that versions 10 and 11 are affected. The root cause is not explicitly detailed in...

CVE-1999-0773

CVE-1999-0773: Buffer overflow in the Solaris lpset program allows local users to gain root access. The available documents confirm the vulnerability but do not provide affected versions, exploit details, or any remediation/patch information.

CVE-1999-1580

CVE-1999-1580 affects SunOS sendmail 5.59–5.65. The bug arises from using popen to process a forwarding host argument, enabling local users to gain root privileges by manipulating the IFS variable and passing crafted values to the -oR option. This creates a local privilege escalation vector. Publ...

CVE-2001-0421

The CVE-2001-0421 issue affects the Solaris FTP server (Solaris 8 and earlier). The vulnerability arises when an authenticated/invalid password sequence is followed by a CWD ~ command, which can trigger a core dump in the root directory and may lead to leaking sensitive data (e.g., shadowed passw...

CVE-2001-0422

CVE-2001-0422 affects Xsun on Solaris 8 and earlier. A buffer overflow triggered by a long HOME environment variable allows local users to execute arbitrary commands. The provided documents do not include remediation details.

CVE-2003-0999

CVE-2003-0999 affects Solaris 2.6–9 components: (1) lpstat and (2) the libprint library. The sources describe unknown multiple vulnerabilities that may allow an attacker to execute arbitrary code or read/write arbitrary files. The CVSS indicates local access with low complexity, no authentication...

CVE-2003-1070

Technical details for CVE-2003-1070 are not publicly available in the provided documents; monitor for updates.

CVE-2003-1072

CVE-2003-1072 pertains to Solaris 8 where a memory leak in the /kernel/drv/lofi driver and the /usr/sbin/lofiadm utility can be triggered by local users, leading to kernel memory consumption and potential denial of service. The OpenVAS entries reference a Solaris Update patch 114162-01 addressing...

CVE-2005-3099

The CVE-2005-3099 entry concerns an unspecified vulnerability in the Xsun and Xprt components of Solaris 7–10 that allows local code execution. Connected documents identify concrete remediation patches for Solaris 10: Xsun patches such as 119060-64/65, 119059-66/69, 119059-71/72/74, and 119060-73...

CVE-2006-1780

CVE-2006-1780 is a local DoS in the Bourne shell on SunOS/Solaris (Solaris 8, 9, 10) caused by a flaw during temporary-file creation that makes sh (and related shells like jsh/rsh/pfsh) crash. Connected advisories reference Solaris patch updates: 109324-10/109325-10 for Solaris 8, 9; 118535-06/11...

CVE-2006-5012

CVE-2006-5012 affects Sun Solaris 8/9/10 via an unspecified local-privilege path that can disable syslog and block security logging. Connected documents show Solaris kernel patches addressing this CVE, including 117350-62 (SPARC Solaris 8), 117351-61 (x86 Solaris 8), and 118558-39 / 118559-39 (So...