| CVE |
Vendors |
Products |
Updated |
CVSS v3.1 |
| Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly. |
| Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges. |
| Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type. |
| Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option. |
| Denial of service through Solaris 2.5.1 telnet by sending ^D characters. |
| Kodak Color Management System (KCMS) on Solaris allows a local user to write to arbitrary files and gain root access. |
| Denial of service in BIND named via malformed SIG records. |
| Buffer overflow in BIND 8.2 via NXT records. |
| Solaris SUNWadmap can be exploited to obtain root access. |
| Buffer overflow in Solaris dtprintinfo program. |
| NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries. |
| Guessable magic cookies in X Windows allows remote attackers to execute commands, e.g. through xterm. |
| admintool in Solaris allows a local user to write to arbitrary files and gain root access. |
| Solaris ufsrestore buffer overflow. |
| The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches. |
| The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack. |
| Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry. |
| Buffer overflow in Solaris lpset program allows local users to gain root access. |
| Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. |
| Malicious option settings in UDP packets could force a reboot in SunOS 4.1.3 systems. |
