Filtered by vendor Sun Subscriptions
Total 1711 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2002-0158 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
Buffer overflow in Xsun on Solaris 2.6 through 8 allows local users to gain root privileges via a long -co (color database) command line argument.
CVE-1999-0334 1 Sun 2 Solaris, Sunos 2025-04-03 N/A
In Solaris 2.2 and 2.3, when fsck fails on startup, it allows a local user with physical access to obtain root access.
CVE-1999-1530 1 Sun 2 Cobalt Raq 2, Cobalt Raq 3i 2025-04-03 N/A
cgiwrap as used on Cobalt RaQ 2.0 and RaQ 3i does not properly identify the user for running certain scripts, which allows a malicious site administrator to view or modify data located at another virtual site on the same system.
CVE-1999-0321 1 Sun 1 Solaris 2025-04-03 N/A
Buffer overflow in Solaris kcms_configure command allows local users to gain root access.
CVE-1999-0318 4 Hp, Ibm, Redhat and 1 more 5 Hp-ux, Aix, Linux and 2 more 2025-04-03 N/A
Buffer overflow in xmcd 2.0p12 allows local users to gain access through an environmental variable.
CVE-1999-1449 1 Sun 1 Sunos 2025-04-03 N/A
SunOS 4.1.4 on a Sparc 20 machine allows local users to cause a denial of service (kernel panic) by reading from the /dev/tcx0 TCX device.
CVE-1999-1428 1 Sun 1 Solstice Adminsuite 2025-04-03 N/A
Solaris Solstice AdminSuite (AdminSuite) 2.1 and 2.2 allows local users to gain privileges via the save option in the Database Manager, which is running with setgid bin privileges.
CVE-1999-1425 1 Sun 1 Solstice Adminsuite 2025-04-03 N/A
Solaris Solstice AdminSuite (AdminSuite) 2.1 incorrectly sets write permissions on source files for NIS maps, which could allow local users to gain privileges by modifying /etc/passwd.
CVE-1999-1371 1 Sun 1 Sunos 2025-04-03 N/A
Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument.
CVE-1999-0303 4 Digital, Netbsd, Openbsd and 1 more 5 Osf 1, Netbsd, Openbsd and 2 more 2025-04-03 N/A
Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames.
CVE-1999-0277 1 Sun 1 Sunos 2025-04-03 N/A
The WorkMan program can be used to overwrite any file to get root access.
CVE-1999-0273 1 Sun 1 Sunos 2025-04-03 N/A
Denial of service through Solaris 2.5.1 telnet by sending ^D characters.
CVE-1999-0263 1 Sun 1 Sunos 2025-04-03 N/A
Solaris SUNWadmap can be exploited to obtain root access.
CVE-1999-1122 1 Sun 1 Sunos 2025-04-03 N/A
Vulnerability in restore in SunOS 4.0.3 and earlier allows local users to gain privileges.
CVE-2005-3472 1 Sun 1 Java System Communications Express 2025-04-03 N/A
Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information from configuration files.
CVE-2005-4046 1 Sun 2 Java System Application Server, One Application Server 2025-04-03 N/A
Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and "compromise data privacy."
CVE-1999-1021 1 Sun 1 Sunos 2025-04-03 N/A
NFS on SunOS 4.1 through 4.1.2 ignores the high order 16 bits in a 32 bit UID, which allows a local user to gain root access if the lower 16 bits are set to 0, as fixed by the NFS jumbo patch upgrade.
CVE-1999-0241 3 Sgi, Sun, Xfree86 Project 4 Irix, Solaris, Sunos and 1 more 2025-04-03 N/A
Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm.
CVE-1999-0017 9 Caldera, Freebsd, Gnu and 6 more 11 Openlinux, Freebsd, Inet and 8 more 2025-04-03 N/A
FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce.
CVE-2001-1066 1 Sun 1 Solaris 2025-04-03 N/A
ns6install installation script for Netscape 6.01 on Solaris, and other versions including 6.2.1 beta, allows local users to overwrite arbitrary files via a symlink attack.