Vulnerabilities (CVE)

Filtered by vendor Sun Subscribe
Total 1711 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-1999-0056 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
Buffer overflow in Sun's ping program can give root access to local users.
CVE-1999-0408 1 Sun 1 Cobalt Raq 2025-04-03 10.0 HIGH N/A
Files created from interactive shell sessions in Cobalt RaQ microservers (e.g. .bash_history) are world readable, and thus are accessible from the web server.
CVE-2006-3824 1 Sun 1 Solaris 2025-04-03 4.9 MEDIUM N/A
systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the copyout function. NOTE: this issue has been referred to as an integer overflow, but it is probably more like a signedness error or integer underflow.
CVE-2003-1067 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges via long arguments to Xsun or other programs that use these functions.
CVE-2002-0387 1 Sun 1 One Application Server 2025-04-03 7.5 HIGH N/A
Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL.
CVE-2005-4796 1 Sun 2 Solaris, Sunos 2025-04-03 3.6 LOW N/A
Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits.
CVE-1999-0024 6 Bsdi, Ibm, Isc and 3 more 12 Bsd Os, Aix, Bind and 9 more 2025-04-03 5.0 MEDIUM N/A
DNS cache poisoning via BIND, by predictable query IDs.
CVE-2004-1942 1 Sun 1 Patch Manager 2025-04-03 7.5 HIGH N/A
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.
CVE-2005-3781 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries."
CVE-2006-3159 1 Sun 2 Iplanet Messaging Server, One Messaging Server 2025-04-03 2.1 LOW N/A
pipe_master in Sun ONE/iPlanet Messaging Server 5.2 HotFix 1.16 (built May 14 2003) allows local users to read portions of restricted files via a symlink attack on msg.conf in a directory identified by the CONFIGROOT environment variable, which returns the first line of the file in an error message.
CVE-2002-1584 2 Sgi, Sun 3 Irix, Solaris, Sunos 2025-04-03 10.0 HIGH N/A
Unknown vulnerability in the AUTH_DES authentication for RPC in Solaris 2.5.1, 2.6, and 7, SGI IRIX 6.5 to 6.5.19f, and possibly other platforms, allows remote attackers to gain privileges.
CVE-1999-0320 1 Sun 2 Solaris, Sunos 2025-04-03 9.3 HIGH N/A
SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files.
CVE-2003-1062 1 Sun 2 Solaris, Sunos 2025-04-03 4.6 MEDIUM N/A
Unknown vulnerability in the sysinfo system call for Solaris for SPARC 2.6 through 9, and Solaris for x86 2.6, 7, and 8, allows local users to read kernel memory.
CVE-1999-0040 7 Bsdi, Freebsd, Hp and 4 more 10 Bsd Os, Freebsd, Hp-ux and 7 more 2025-04-03 7.2 HIGH N/A
Buffer overflow in Xt library of X Windowing System allows local users to execute commands with root privileges.
CVE-1999-0054 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
Sun's ftpd daemon can be subjected to a denial of service.
CVE-1999-0410 1 Sun 1 Sunos 2025-04-03 7.2 HIGH N/A
The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access.
CVE-2002-0348 1 Sun 3 Cobalt Raq 2, Cobalt Raq 3i, Cobalt Raq 4 2025-04-03 7.5 HIGH N/A
service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.
CVE-2003-0999 1 Sun 2 Solaris, Sunos 2025-04-03 7.2 HIGH N/A
Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files.
CVE-1999-0908 1 Sun 2 Solaris, Sunos 2025-04-03 5.0 MEDIUM N/A
Denial of service in Solaris TCP streams driver via a malicious connection that causes the server to panic as a result of recursive calls to mutex_enter.
CVE-2002-2089 1 Sun 1 Solaris 2025-04-03 4.6 MEDIUM N/A
Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument.