CVE-2004-0800

CVE-2004-0800 affects the Solaris CDE Mailer component dtmail (on Solaris 8/9). The vulnerability is a format string issue in argv[0], allowing a local user to execute arbitrary code with the privileges of the vulnerable process (typically the mail group). The CERT/NVD entries describe local code...

CVE-2004-1393

Technical details about CVE-2004-1393 are not publicly available in the provided documents. No concrete affected products, impact description, or remediation are described here. Monitor for updates as additional information is released.

CVE-2005-3071

CVE-2005-3071 describes an unspecified vulnerability in the Unix File System (UFS) on Solaris 8 and 9 that, when logging is enabled, allows local users to cause a denial of service (a soft hang) via certain write operations to UFS. The NVD entry lists a low overall risk (CVSS v2 base score 2.1) w...

CVE-2007-2882

CVE-2007-2882 concerns an unspecified vulnerability in the NFS client module of Sun Solaris versions 8–10 prior to the 20070524 build when the system acts as an NFS server. The issue can allow remote attackers to cause a denial of service (crash) by sending certain ACL packets. Connected advisori...

CVE-2009-4080

CVE-2009-4080 affects Sun Solaris 9/10 and OpenSolaris before snv_78, via ldap_cachemgr (LDAP client configuration cache daemon). The vulnerability allows local users to trigger a denial of service (daemon crash) through vectors involving multiple serviceSearchDescriptor attributes and a getldap_...

CVE-2011-2290

Technical details about CVE-2011-2290 are not publicly available in the provided documents. Monitor for updates from official advisories and vendor bulletins.

CVE-2012-0569

CVE-2012-0569 affects Oracle Solaris 10 (x86 and SPARC) via the Solaris Install/smpatch component. The vulnerability, described in various Nessus/NVD records, implies that local attackers can indirectly affect confidentiality and integrity with partial impact, requiring at least local logon and u...

CVE-2012-0570

CVE-2012-0570 is described as an unspecified local vulnerability in Solaris 8–11 related to Libraries/Libc. Multiple connected sources confirm the issue affecting Solaris components (Libraries/Libc) and note exploitability conditions: the vulnerability is easily exploitable with local OS access a...

CVE-2012-1694

Technical details about CVE-2012-1694 are not publicly provided in the connected documents; only the initial description notes an unspecified vulnerability in Oracle Solaris 10 related to libsasl. Monitor for updates.

CVE-2012-1750

CVE-2012-1750 affects Oracle Solaris 8–11 in the mailx(1) component. The vulnerability is described as unspecified with local access required to affect confidentiality, integrity, and availability; no exploit details are provided in the sources. Remediation is indicated by Oracle’s July 2012 CPU ...

CVE-2013-0408

Technical details about CVE-2013-0408 are not publicly provided in the supplied documents. No specifics on affected component versions, root cause, or fix are given here. Monitor for updates.

CVE-2013-3752

CVE-2013-3752 is a Solaris 11 vulnerability tied to the Service Management Facility (SMF). The Nessus issue bundle notes the Solaris SRU0 patch set for July 2013 addresses an SMF-related flaw affecting Solaris 11, with exploitation via a network vector reported as unauthenticated. The impact desc...

CVE-2014-4276

The provided connected documents confirm CVE-2014-4276 affects Oracle Solaris 11 via the CIFS/SMB server component. The issue is described as an easily exploitable, unauthenticated network vulnerability in the Solaris CIFS server that can allow unauthorized read/update of Solaris data and partial...

CVE-2015-0430

CVE-2015-0430 affects Oracle Solaris 10/11 RPC Utility. The Solaris RPC System component is vulnerable due to an unspecified issue in RPC Utility that can allow a local user to affect confidentiality (partial exposure) with not widely exploitable conditions. Affected versions include Solaris 10 a...

CVE-2001-0421

The CVE-2001-0421 issue affects the Solaris FTP server (Solaris 8 and earlier). The vulnerability arises when an authenticated/invalid password sequence is followed by a CWD ~ command, which can trigger a core dump in the root directory and may lead to leaking sensitive data (e.g., shadowed passw...

CVE-2001-0595

The CVE-2001-0595 issue affects Sun’s KCMS component on Solaris 7/8, where a buffer overflow in the kcsSUNWIOsolf.so library allows a local user to execute arbitrary commands via the KCMS_PROFILES environment variable (demonstrated by kcms_configure). OpenVAS entries describe the KCMS Profile Ser...

CVE-2002-0884

CVE-2002-0884 describes multiple format string vulnerabilities in the ARP server component in.rarpd affecting Solaris, Caldera UnixWare and Open UNIX (and possibly other OSes). The flaw allows remote code execution via improper handling of format strings in the functions (1) syserr and (2) error....

CVE-2003-1055

The CVE-2003-1055 issue affects Sun Solaris 8 and 9 via the nss_ldap.so.1 library. The vulnerability is a buffer overflow caused by a long hostname used in an LDAP lookup, which can allow local users to gain root access. The connected records corroborate Solaris versions and the nss_ldap.so.1 com...

CVE-2003-1060

The CVE-2003-1060 entry describes a vulnerability in the NFS Server for Solaris 7, 8, and 9 where remote attackers can cause a denial of service (UFS panic) by sending certain invalid UFS requests that trigger a null dereference. Affected software is the NFS Server on Solaris 7–9; the underlying ...

CVE-2003-1066

CVE-2003-1066 is a Solaris-specific vulnerability in the syslogd daemon (Solaris 2.6–9). The issue is a buffer overflow triggered by long UDP syslog packets, allowing remote attackers to cause a denial of service (syslogd crash) and potentially execute arbitrary code. Public details in the connec...

CVE-2006-1780

CVE-2006-1780 is a local DoS in the Bourne shell on SunOS/Solaris (Solaris 8, 9, 10) caused by a flaw during temporary-file creation that makes sh (and related shells like jsh/rsh/pfsh) crash. Connected advisories reference Solaris patch updates: 109324-10/109325-10 for Solaris 8, 9; 118535-06/11...

CVE-2007-0165

CVE-2007-0165 concerns a remote DoS in Sun Solaris 8/9 via malformed RPC requests that crash rpcbind through libnsl. The connected OpenVAS/Nessus references discuss rpcbind DoS in HP-UX and patch checks, but there are no Solaris-specific versioned fixes or root-cause details in the connected docu...

CVE-2007-5225

CVE-2007-5225 is a Solaris local-privilege/ memory-leak issue caused by an integer signedness error in fifofs (FIFO filesystems) that allows a local user to read unspecified memory via a negative value to the I_PEEK ioctl on Solaris 8–10. For Solaris 10, patches exist: 127738-01 for x86 and 12773...

CVE-2011-0412

CVE-2011-0412 affects Oracle Solaris 8, 9, and 10. The vulnerability arises from back-out patch files (undo.Z) stored unencrypted with world-readable permissions under /var/sadm/pkg/, enabling local users to access password hashes and perform brute-force password guessing. Remediation details in ...

CVE-2011-0812

CVE-2011-0812 affects Oracle Solaris 8, 9, 10, and 11 Express, with an unspecified vulnerability in the Solaris kernel that allows local users to affect availability via unknown vectors. The description consistently notes the issue as kernel-related and local-access in Solaris components, but the...

CVE-2011-2259

Technical details about CVE-2011-2259 are not publicly provided in the supplied documents; records only indicate an unspecified local vulnerability in Oracle Solaris UFS affecting availability. Monitor for updates in official advisories.

CVE-2011-2291

CVE-2011-2291 affects Oracle Solaris 10 (Trusted Extensions): a local confidentiality issue with unspecified vectors. Nessus patches 147182-01 (sparc) and 147183-01 (x86) address labeling patches for SunOS 5.10. Installing these patches is the remediation mentioned in connected Nessus plugins. CV...

CVE-2011-2293

CVE-2011-2293 affects Oracle Solaris 11 Express. The vulnerability is described as an unspecified local-privilege/availability issue related to Zones, with unknown vectors and a confirmed impact to availability (CVE entry shows NEG/LOCAL access, no confidentiality or integrity impact). The NVD me...

CVE-2012-3189

CVE-2012-3189 affects Oracle Solaris 11, linked to the COMSTAR subcomponent. The provided sources indicate an unspecified vulnerability that allows remote attackers to affect availability via network access (DoS). The Nessus oct2012 SRU11_4 plugin confirms COMSTAR impact and notes the vulnerabili...

CVE-2013-3765

CVE-2013-3765 is described as an unspecified local-privilege vulnerability in Oracle Solaris 11 affecting the Kernel/VM, with availability impact. The public remediation referenced is the Oracle July 2013 CPU patch set (SRU11_1_7_5_0) to mitigate. The exact vector/root cause and exploit details a...

CVE-2014-6509

CVE-2014-6509 is a Solaris 10 kernel vulnerability that allows local users to affect availability (DOS) via kernel-level flaws. The connected Nessus entries indicate the kernel subcomponent is affected in Solaris 10 (both x86 and SPARC) and describe an easily exploitable condition requiring local...

CVE-2015-0375

CVE-2015-0375 affects Oracle Solaris 10 and 11, specifically the Solaris Network component. The connected Nessus/NVD entries describe an easily exploitable, unauthenticated network vulnerability in TCP/IP that can impact confidentiality and, in some listings, may enable unauthorized read access t...

CVE-1999-0676

CVE-1999-0676 affects Solaris 2.6, where the sdtcm_convert component allows a local user to overwrite sensitive files via a symlink attack. The vulnerability arises from a symlink handling weakness in sdtcm_convert, enabling a local attacker to target files the process should not write to. The co...

CVE-1999-1021

CVE-1999-1021 affects SunOS 4.1–4.1.2 NFS: the high-order 16 bits of a 32-bit UID are ignored, enabling a local user to gain root if the lower 16 bits are 0. The issue is mitigated/fixed by the NFS jumbo patch upgrade. The connected sources confirm the affected OS and the patch-based fix; exploit...

CVE-1999-1025

The CVE-1999-1025 issue affects Solaris 2.6 where the CDE screen lock program (screenlock) fails to lock an unprivileged user’s console session when the host is an NIS+ client, enabling anyone with physical access to login using arbitrary strings. Affected component: CDE screenlock on Solaris 2.6...

CVE-1999-1318

CVE-1999-1318 affects SunOS 4.1.3 and earlier. The vulnerable component is /usr/5bin/su , which uses a search path that includes the current working directory (.). This allows local users to gain privileges via Trojan horse programs. The description clearly states a local privilege escalation and...

CVE-1999-1467

The CVE-1999-1467 issue affects the rcp service on SunOS 4.0.x. The underlying problem is tied to the configuration of the nobody user, enabling remote attackers from trusted hosts to execute arbitrary commands as root. The connected PT-1989-1001 entry confirms SunOS 4.0.x as the affected platfor...

CVE-1999-1507

Technical details for CVE-1999-1507 are not publicly available in the provided documents; monitor for updates.

CVE-2000-0055

CVE-2000-0055 describes a buffer overflow in the Solaris chkperm command that allows a local user to gain root privileges by supplying a long -n option. The vulnerability is local in scope with a high impact (confidentiality, integrity, and availability all listed as complete) and a CVSS base sco...

CVE-2001-1076

CVE-2001-1076 : Buffer overflow in the Solaris SunOS whodo utility (versions 5.5.1–5.8) allows local users to execute arbitrary code via overly long environment variables (SOR or CFIME). The connected documents confirm the affected platform and vulnerable component, and that exploitation is local...

CVE-2005-4796

CVE-2005-4796 relates to an unspecified vulnerability in the XView library (libxview.so) on Solaris 2.5 through 10. The issue is a local privilege scenario where a local user could corrupt files via unknown vectors tied to the handling of the clipboard selection during exit of an XView applicatio...

CVE-2007-4395

Technical details about CVE-2007-4395 are not publicly available in the provided connected documents. The OpenVAS entries and external references do not specify affected products, versions, root cause, or fixes. Monitor for updates.

CVE-2007-5422

CVE-2007-5422 affects Sun Solaris 10, specifically the Solaris Auditing feature within the Basic Security Module (BSM). When configured to audit networking (nt) events, a local attacker can trigger a denial-of-service (panic) via unspecified vectors. The available sources describe the affected co...

CVE-2011-0800

CVE-2011-0800 is an unspecified local vulnerability in the Solaris component across Oracle Solaris 8–11 Express. Affects Solaris systems where Administration Utilities could be exploited by local users, impacting confidentiality, integrity and availability . Remediation is to apply vendor patches...

CVE-2012-1692

CVE-2012-1692 concerns an unspecified vulnerability in Oracle Sun Solaris 10 that affects the SCTP component and can impact availability. The vulnerability is described as a local issue where local users can affect availability, with a CVSS-like impact indicating local attack vector, low complexi...

CVE-2013-3745

The CVE-2013-3745 entry corresponds to a vulnerability in the Solaris Libraries/Libc component affecting Oracle Solaris 8, 9, 10 and 11. The connected Nessus plugin details specify that this is a local, easily exploited issue that can cause a hang or a frequent crash (complete DOS) on affected So...

CVE-2014-4239

CVE-2014-4239 affects Oracle Solaris via the Common Agent Container (Cacao). Affected platforms include Solaris 8, 9, 10 and 11.1; the issue allows remote authenticated users to compromise confidentiality (partial impact) over a network with single authentication and low attack complexity. Connec...

CVE-1999-1023

The CVE-1999-1023 entry concerns Solaris 7.0, where the useradd utility does not correctly interpret certain date formats provided to the -e expiration date argument. This incorrect parsing could allow users to log in after their accounts are supposed to expire, per the documented description. No...

CVE-1999-1197

CVE-1999-1197 affects SunOS 4.1.1 TIOCCONS. The issue is a missing or improper permission check when a user redirects console output/input, allowing a local user to gain privileges. No remediation or patch information is provided in the connected documents; exploitation details are not described.

CVE-1999-1297

Affected software : cmdtool in OpenWindows 3.0 and XView 3.0 running on SunOS 4.1.4 and earlier. Vulnerability : local attackers with physical access can cause the system to display unechoed characters (e.g., password prompts) via the L2/AGAIN key. Root cause / vector : the prompt characters can ...