Filtered by vendor Sun
Subscriptions
Total
1711 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2006-1782 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) password when a privileged user (1) runs idsconfig; or "insecurely" runs LDAP2 commands with the -w option, including (2) ldapadd, (3) ldapdelete, (4) ldapmodify, (5) ldapmodrdn, and (6) ldapsearch. | ||||
CVE-1999-0211 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
Extra long export lists over 256 characters in some mount daemons allows NFS directories to be mounted by anyone. | ||||
CVE-1999-0210 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters. | ||||
CVE-2006-1780 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
The Bourne shell (sh) in Solaris 8, 9, and 10 allows local users to cause a denial of service (sh crash) via an unspecified attack vector that causes sh processes to crash during creation of temporary files. | ||||
CVE-1999-0209 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
The SunView (SunTools) selection_svc facility allows remote users to read files. | ||||
CVE-1999-0691 | 4 Cde, Digital, Ibm and 1 more | 5 Cde, Unix, Aix and 2 more | 2025-04-03 | N/A |
Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | ||||
CVE-1999-0254 | 1 Sun | 1 Solaris | 2025-04-03 | N/A |
A hidden SNMP community string in HP OpenView allows remote attackers to modify MIB tables and obtain sensitive information. | ||||
CVE-2005-0109 | 5 Freebsd, Redhat, Sco and 2 more | 9 Freebsd, Enterprise Linux, Enterprise Linux Desktop and 6 more | 2025-04-03 | N/A |
Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic keys, via a timing attack on memory cache misses. | ||||
CVE-1999-1318 | 1 Sun | 1 Sunos | 2025-04-03 | N/A |
/usr/5bin/su in SunOS 4.1.3 and earlier uses a search path that includes the current working directory (.), which allows local users to gain privileges via Trojan horse programs. | ||||
CVE-1999-1427 | 1 Sun | 1 Solstice Adminsuite | 2025-04-03 | N/A |
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 create lock files insecurely, which allows local users to gain root privileges. | ||||
CVE-1999-0186 | 1 Sun | 1 Solaris | 2025-04-03 | N/A |
In Solaris, an SNMP subagent has a default community string that allows remote attackers to execute arbitrary commands as root, or modify system parameters. | ||||
CVE-1999-0018 | 3 Ibm, Sgi, Sun | 4 Aix, Irix, Solaris and 1 more | 2025-04-03 | N/A |
Buffer overflow in statd allows root privileges. | ||||
CVE-2005-0248 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the accounts with a blank password, which allows remote or local attackers to break into those accounts. | ||||
CVE-2005-0357 | 2 Emc, Sun | 3 Legato Networker, Solstice Backup, Storedge Enterprise Backup Software | 2025-04-03 | N/A |
EMC Legato NetWorker, Sun Solstice Backup 6.0 and 6.1, and StorEdge Enterprise Backup 7.0 through 7.2 rely on AUTH_UNIX authentication, which relies on user ID for authentication and allows remote attackers to bypass authentication and gain privileges by spoofing a username or UID. | ||||
CVE-2006-2513 | 1 Sun | 1 Java System Directory Server | 2025-04-03 | N/A |
Unspecified vulnerability in the installation process in Sun Java System Directory Server 5.2 causes wrong user data to be written to a file created by the installation, which allows remote attackers or local users to gain privileges. | ||||
CVE-2001-0190 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Buffer overflow in /usr/bin/cu in Solaris 2.8 and earlier, and possibly other operating systems, allows local users to gain privileges by executing cu with a long program name (arg0). | ||||
CVE-2001-1008 | 1 Sun | 2 Java Plug-in, Jre | 2025-04-03 | N/A |
Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate. | ||||
CVE-1999-1580 | 2 Sendmail, Sun | 2 Sendmail, Sunos | 2025-04-03 | N/A |
SunOS sendmail 5.59 through 5.65 uses popen to process a forwarding host argument, which allows local users to gain root privileges by modifying the IFS (Internal Field Separator) variable and passing crafted values to the -oR option. | ||||
CVE-1999-0190 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access. | ||||
CVE-1999-0189 | 1 Sun | 2 Solaris, Sunos | 2025-04-03 | N/A |
Solaris rpcbind listens on a high numbered UDP port, which may not be filtered since the standard port number is 111. |