CVE-1999-0024

CVE-1999-0024 describes a DNS cache-poisoning flaw in BIND caused by predictable DNS query IDs. The connected sources consistently state DNS cache poisoning via BIND, with related discussions in Red Hat/Security advisories and CERT context. The materials do not provide a concrete patch version or...

CVE-2001-0797

CVE-2001-0797 is a buffer overflow in the System V–derived /bin/login (affecting login/telnetd implementations such as TTYPROMPT) triggered by a large number of arguments, enabling remote arbitrary-command execution. The vulnerability affects various System V based OSes and can be exploited via s...

CVE-2003-0201

CVE-2003-0201 describes a buffer overflow in Samba's trans2open handling. Specifically, the overflow occurs in call_trans2open in trans2.c, affecting Samba 2.2.x before 2.2.8a, Samba 2.0.x before 2.0.10 (and earlier 2.0.x releases), and Samba-TNG before 0.3.2. This allows remote attackers to exec...

CVE-1999-0513

CVE-1999-0513 describes a vulnerability where ICMP messages to broadcast addresses are allowed, enabling a Smurf attack that can cause a denial of service. The primary sources (NVD, Red Hat, and CVE listings) consistently state that the issue involves ICMP traffic to broadcast addresses, resultin...

CVE-1999-0097

The CVE-1999-0097 entry concerns the AIX FTP client, where a malicious FTP server can force execution of shell commands on the client via metacharacters (for example, a pipe). The issue is documented across multiple sources (NVD, CVE list) and is consistent with historical CERT/Red Hat advisories...

CVE-2002-0573

CVE-2002-0573 affects Solaris systems running the rpc.rwalld daemon (Solaris 2.5.1–8). The issue is a format-string vulnerability in the error-handling path of rpc.rwalld, which can allow a remote attacker to execute arbitrary code with the daemon’s privileges (typically root) by sending a specia...

CVE-1999-0003

CVE-1999-0003: A buffer overflow in the ToolTalk database server (rpc.ttdbserverd) may allow an attacker to execute arbitrary commands as root. Affected component is ToolTalk’s object database server; exploitation would require access to the vulnerable service. In the provided references, the imp...

CVE-2003-0161

Technical details for CVE-2003-0161 are not publicly provided in the supplied documents; monitor for updates from the connected advisories and feeds.

CVE-2003-1063

The CVE-2003-1063 entry concerns Solaris 2.6/7 cachefs patches (105693-13, 108800-02, 105694-13, 108801-02) that overwrite inetd.conf. This may silently reenable services and allow remote attackers to bypass the intended security policy. Affected component: cachefs daemon on Solaris; root cause: ...

CVE-2003-0028

Technical details about CVE-2003-0028 are not present in the provided documents. The connected sources reference the CVE in Debian/OpenVAS advisories but do not specify affected products, root cause, versions, impact, or fixes.

CVE-2003-0694

CVE-2003-0694 affects Sendmail 8.12.9, where the prescan function (parsing SMTP headers in parseaddr.c) can be exploited remotely via a buffer overflow to execute arbitrary code. Debian DSA-384 also references CAN-2003-0694 in its two vulnerabilities entry. The available documents confirm affecte...

CVE-2001-0236

CVE-2001-0236 affects Solaris snmpXdmid, where a buffer/heap overflow in the SNMP-to-DMI mapper allows remote code execution via a long indication event. Affected platforms include SunOS 5.7/Solaris 7 and SunOS 5.8/Solaris 8. The vulnerability is triggered by handling crafted SNMP traps/indicatio...

CVE-1999-0165

Technical details about CVE-1999-0165 are not publicly available in the provided documents; no concrete affected products, versions, or fixes are specified. Monitor for updates from vendors and CVE sources.

CVE-2003-0196

CVE-2003-0196 corresponds to multiple buffer overflows in Samba before 2.2.8a, enabling remote code execution or denial of service. The related CVE-2003-0201 describes a trans2open overflow; exploitation has been demonstrated in various Samba builds (2.2.0–2.2.8) across platforms (Linux, macOS, B...

CVE-2002-1317

The CVE-2002-1317 flaw affects the Solaris X Window Font Server (XFS) daemon fs.auto, where the Dispatch() function handles XFS queries. This remotely exploitable buffer overflow can allow an attacker to crash the service or execute arbitrary code with the fs.auto/Font Server privileges (typicall...

CVE-1999-0009

Summary of CVE-1999-0009 from connected documents : The issue is an inverse query buffer overflow in BIND releases 4.9 and 8. The Red Hat entry mirrors the description: the vulnerability is an inverse query buffer overflow in BIND 4.9 and 8 releases. Tenable/Nessus references indicate this is a r...

CVE-2002-1337

CVE-2002-1337 affects Sendmail 5.79 through 8.12.7, with a buffer overflow in header processing (crackaddr in headers.c) that enables remote code execution, reported as a high-severity issue. Public advisories and patches exist across multiple vendors: HP-UX patches PHNE_35483/35484 (and related ...

CVE-1999-0023

CVE-1999-0023 affects the rdist utility, with the vulnerability located in the lookup() function where a buffer overflow can be exploited by a local user to gain root privileges. Connected documents consistently describe local privilege escalation via rdist’s lookup() overflow, with several advis...

CVE-2001-0353

CVE-2001-0353 describes a buffer overflow in the Solaris and BSD line printer daemons (in.lpd) that can allow local or remote attackers to gain root privileges via the transfer job routine. Public advisories (ISS X-Force/CERT CA-2001-15) detail remote-exploit scenarios affecting Solaris 2.6/7/8 a...

CVE-2001-1503

Vulnerability: The finger daemon (in.fingerd) in Sun Solaris 2.5–8 and SunOS 5.5–5.8 allows remote attackers to list all user accounts by sending a crafted finger request (e.g., finger 'a b c d e f g h'@host). Affects multiple Solaris releases; impact is limited to information disclosure of accou...

CVE-1999-0241

The provided connected documents confirm CVE-1999-0241 affects X Windows (X11) with a vulnerability in the authentication cookies: guessable magic cookies allow remote attackers to execute commands (e.g., via xterm). Root cause is guessable, enabling remote command execution with no authenticatio...

CVE-1999-0977

The CVE-1999-0977 entry describes a buffer overflow in the Solaris sadmind daemon (including AdminSuite components) that can be triggered remotely via a NETMGT_PROC_SERVICE request, potentially allowing arbitrary code execution with root privileges. Affected systems run Solaris/SunOS with sadmind...

CVE-2002-0033

Solaris cachefsd (cachefs daemon) is affected by CVE-2002-0033 due to a heap-based overflow in the cfsd_calloc function. An unauthenticated remote attacker can trigger a remote code execution by sending a crafted RPC request with a long directory and cache name, potentially gaining the privileges...

CVE-2002-0158

CVE-2002-0158 refers to a buffer overflow in Xsun on Solaris 2.6–8 when processing a long -co (color database) command line argument. The overflow occurs in the heap/dynamic memory handling and can enable a local user to execute arbitrary code with root privileges, as described in the CVE details...

CVE-1999-0125

CVE-1999-0125 describes a local buffer overflow in the SGI IRIX mailx program. The vulnerability affects the mailx component of SGI IRIX; the root cause is a buffer overflow that can impact confidentiality, integrity and availability (partial impacts) when an attacker with local access and no aut...

CVE-1999-0767

CVE-1999-0767 is a buffer overflow vulnerability described in Solaris components (libc, ufsrestore, and rcp) triggered via the LC_MESSAGES environment variable. The available connected records confirm the affected software and the root cause (buffer overflow), with the PT-1999-1338 entry reiterat...

CVE-1999-0370

Technical details (affected versions, exploit methods, fixes) are not publicly provided in the supplied documents for CVE-1999-0370; monitor for updates from official sources.

CVE-1999-0493

The CVE-1999-0493 entry describes a vulnerability in rpc.statd bounce behavior that can forward RPC calls to the local OS via SM_MON/SM_NOTIFY. Exploitation can chain with automountd vulnerabilities to remotely trigger issues in automountd, potentially escalating to root in affected setups. The i...

CVE-2001-1414

Technical details such as affected products, exact root cause, impact, affected versions, and remediation are not publicly provided in the supplied documents. Monitor for updates.

CVE-2003-1068

CVE-2003-1068 is a Solaris utmp_update buffer‑overflow vulnerability affecting Solaris 2.6–9 that can allow local users to gain root privileges. The connected OpenVAS entries reference the Solaris update 113650-02 for /usr/lib/utmp_update, indicating a patch is available. The CVE description note...

CVE-1999-0120

CVE-1999-0120 concerns Solaris: an improperly writable utmp file (writable by non-root users) enables local privilege escalation to root. The root cause is that the utmp file is writable by non-root users, allowing manipulation that can compromise confidentiality, integrity, and availability. The...

CVE-2001-0779

CVE-2001-0779 describes a remote buffer overflow in the rpc.yppasswdd (yppasswd) service, affecting Solaris 2.6/7/8 (and related implications for AIX per vendor notes). The vulnerability allows a remote attacker to gain root privileges by supplying a long username string, as documented by multipl...

CVE-1999-0687

Technical details (affected product/version, impact, remediation) are not publicly available in the provided documents. Monitor for updates from authoritative sources.

CVE-1999-0055

CVE-1999-0055 involves buffer overflows in Sun libnsl that allow root access. The connected Red Hat, NVD, CVE and EUVD entries repeat the same description; no concrete product versions, root cause specifics (beyond “libnsl” and “buffer overflow”), or remediation details are provided in the connec...

CVE-1999-0188

Technical details for CVE-1999-0188 are not publicly available in the provided documents. Monitor for updates.

CVE-2000-0471

CVE-2000-0471 is a Solaris vulnerability where a buffer overflow in ufsrestore during interactive extraction can allow a local user to gain root privileges via long pathnames in the dump file. The CERT page notes multiple SunOS patches (e.g., 103261-08, 103262-08, 103640-35, 105722-07, 106793-07,...

CVE-2003-0064

The CVE concerns dtterm and related terminals’ Window Title Reporting feature. An attacker can craft an escape sequence that places the current window title on the command line, and the user must press Enter for the command to execute, enabling arbitrary command execution on the vulnerable host. ...

CVE-1999-0065

CVE-1999-0065 involves multiple buffer overflows in how dtmail handles attachments. The connected records confirm the affected component is dtmail, and the root cause is buffer overflow in processing attachments, enabling a remote attacker to execute commands. The available documents do not speci...

CVE-1999-0442

This CVE refers to Solaris ff.core, where local users can modify files. The connected documents corroborate the same description across Red Hat, CVE listing, EUVD, and NVD entries, but do not provide concrete technical details such as affected versions, root cause, exploit method, or recommended ...

CVE-2002-1980

The CVE-2002-1980 entry concerns a buffer overflow in Sun Solaris volumes-d vold (Volume Manager daemon) affecting Solaris 2.5.1 through 8. The underlying flaw is a buffer overflow in vold that allows local users to execute arbitrary code. Affected component: vold; affected platforms: Solaris 2.5...

CVE-2003-1073

CVE-2003-1073 describes a race condition in the Solaris at command (affecting Solaris 2.6 through 9) that allows local users to delete arbitrary files. The flaw occurs when a -r argument containing .. sequences in a job name passes the permission check but before the deletion actually happens, en...

CVE-1999-0263

The CVE-1999-0263 entry concerns Solaris SUNWadmap. The documented vulnerability indicates that SUNWadmap can be exploited to obtain root access. The available connected documents corroborate this impact, with no additional technical specifics (e.g., exact vulnerable function, version ranges, exp...

CVE-1999-0674

CVE-1999-0674 affects the BSD profiling system call. A local user can modify the internal data space of a program via profiling and execve, with potential impact on confidentiality, integrity, and availability as noted in the sources. No remediation steps or concrete exploit details are provided ...

CVE-1999-0875

Technical details (affected products/versions, exploitation, or mitigations) for CVE-1999-0875 are not provided in the supplied documents. Monitor for updates and additional disclosures.

CVE-2001-0426

CVE-2001-0426 describes a buffer overflow in the dtsession component affecting Solaris (and possibly other OSes) that lets local users gain privileges when a long LANG environment variable is processed. The vulnerability is triggered by excessively long LANG values, leading to privilege escalatio...

CVE-2002-1587

The CVE-2002-1587 entry concerns the libthread library (libthread.so.1 ) on Solaris 2.5.1–8 . A local attacker can cause a denial of service (hang) by forcing the application to wait for a mutex. Affected software is any application using libthread. The connected documents do not provide remediat...

CVE-2003-0609

CVE-2003-0609 describes a stack-based buffer overflow in Sun Solaris’ runtime linker ld.so.1 (vulnerable on Solaris 2.6–9) that lets local users gain root privileges when LD_PRELOAD is long. The root cause is a overflow in the dynamic linker when processing LD_PRELOAD, enabling a local privilege ...

CVE-2000-0317

CVE-2000-0317 describes a buffer overflow in Solaris 7 lpset, leading to local root privileges when a long -r option is supplied. The entry specifically notes local privilege escalation, but the provided documents do not include detailed information on affected versions beyond Solaris 7, nor expl...

CVE-2003-0027

The CVE-2003-0027 vulnerability affects Sun KCMS kcms_server on Solaris. The KCS_OPEN_PROFILE call does not properly validate the fileName, allowing a remote attacker to perform directory traversal and read arbitrary files. The ToolTalk database server (rpc.ttdbserverd) TT_ISBUILD() procedure can...

CVE-2003-0669

The CVE-2003-0669 entry relates to Solaris, affecting versions 2.6 through 9. The vulnerability is described as unknown, causing a denial of service (system panic) via a rare race condition or an attack by local users. The available connected documents do not provide concrete technical details su...