Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Filtered by product Sunos
Total 609 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2001-0403 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
/opt/JSparm/bin/perfmon program in Solaris allows local users to create arbitrary files as root via the Logging File option in the GUI.
CVE-2001-0421 1 Sun 2 Solaris, Sunos 2025-04-03 6.4 MEDIUM N/A
FTP server in Solaris 8 and earlier allows local and remote attackers to cause a core dump in the root directory, possibly with world-readable permissions, by providing a valid username with an invalid password followed by a CWD ~ command, which could release sensitive information such as shadowed passwords, or fill the disk partition.
CVE-1999-0851 3 Ibm, Sco, Sun 4 Aix, Openserver, Unixware and 1 more 2025-04-03 2.1 LOW N/A
Denial of service in BIND named via naptr.
CVE-1999-1023 1 Sun 1 Sunos 2025-04-03 4.6 MEDIUM N/A
useradd in Solaris 7.0 does not properly interpret certain date formats as specified in the "-e" (expiration date) argument, which could allow users to login after their accounts have expired.
CVE-2001-0236 1 Sun 2 Solaris, Sunos 2025-04-03 10.0 HIGH N/A
Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.
CVE-1999-0689 2 Cde, Sun 3 Cde, Solaris, Sunos 2025-04-03 7.2 HIGH N/A
The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack.
CVE-1999-0168 1 Sun 1 Sunos 2025-04-03 7.5 HIGH N/A
The portmapper may act as a proxy and redirect service requests from an attacker, making the request appear to come from the local host, possibly bypassing authentication that would otherwise have taken place. For example, NFS file systems could be mounted through the portmapper despite export restrictions.
CVE-2006-3920 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect sequence number, which triggers an ACK storm.
CVE-1999-1586 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
loadmodule in SunOS 4.1.x, as used by xnews, does not properly sanitize its environment, which allows local users to gain privileges, a different vulnerability than CVE-1999-1584.
CVE-1999-0296 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Solaris volrmmount program allows attackers to read any file.
CVE-1999-0015 4 Hp, Microsoft, Netbsd and 1 more 5 Hp-ux, Windows 95, Windows Nt and 2 more 2025-04-03 5.0 MEDIUM N/A
Teardrop IP denial of service.
CVE-2003-1075 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other active mode FTP clients.
CVE-1999-0300 1 Sun 2 Solaris, Sunos 2025-04-03 7.5 HIGH N/A
nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers.
CVE-2004-2306 1 Sun 2 Solaris, Sunos 2025-04-03 4.6 MEDIUM N/A
Sun Solaris 7 through 9, when Basic Security Module (BSM) is enabled and the SUNWscpu package has been removed as a result of security hardening, disables mail alerts from the audit_warn script, which might allow attackers to escape detection.
CVE-1999-1388 1 Sun 1 Sunos 2025-04-03 6.2 MEDIUM N/A
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
CVE-2004-1767 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.
CVE-2002-0085 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
cachefsd in Solaris 2.6, 7, and 8 allows remote attackers to cause a denial of service (crash) via an invalid procedure call in an RPC request.
CVE-1999-0315 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflow in Solaris fdformat command gives root access to local users.
CVE-2001-1328 1 Sun 1 Sunos 2025-04-03 7.5 HIGH N/A
Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.
CVE-2005-0426 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a NULL dereference.