SO
Product
Solaris
450
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2003-0466 | 9.8 | Aug 27 | Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0… Affected: 9.0 |
| CVE-2002-0391 | 9.8 | Aug 12 | Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to… Affected: 2.6; 9.0 |
| CVE-1999-1588 | 9.8 | Dec 31 | Buffer overflow in nlps_server in Sun Solaris x86 2.4, 2.5, and 2.5.1 allows remote attackers to execute arbitrary code as root via a long string beginning with "NLPS:002:002:" to… Affected: 2.4; 2.5; 2.5.1 |
| CVE-1999-0038 | 8.4 | Apr 26 | Buffer overflow in xlock program allows local users to execute commands as root Affected: 2.4; 2.5; 2.5.1; 2.5.1 |
| CVE-1999-0022 | 7.8 | Jul 3 | Local user gains root privileges via buffer overflow in rdist, via expstr() function Affected: 4.1.3 |
| CVE-2005-0109 | 5.6 | Mar 5 | Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to… Affected: 7.0; 8.0; 9.0; 9.0; 10.0 |
| CVE-2009-4774 | – | Apr 21 | Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv_49 through snv_117, when 64bit mode is used on the Intel x86 platform and a Linux (lx) branded zone is configured,… Affected: 10 |
| CVE-2010-1183 | – | Mar 29 | Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of… Affected: All versions, or not specified |
| CVE-2010-0453 | – | Feb 3 | The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial… Affected: 10.0 |
| CVE-2010-0310 | – | Jan 14 | Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from software updates Affected: 10.0; 10.0 |
| CVE-2009-4075 | – | Nov 25 | Unspecified vulnerability in the timeout mechanism in sshd in Sun Solaris 10, and OpenSolaris snv_99 through snv_123, allows remote attackers to cause a denial of service (daemon… Affected: 10; 10 |
| CVE-2009-3899 | – | Nov 6 | Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory… Affected: 10; 10 |
| CVE-2009-3851 | – | Nov 3 | Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically… Affected: 10.0; 10.0 |
| CVE-2009-3839 | – | Nov 2 | Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_37 through snv_125, might allow remote attackers to execute… Affected: 10; 10.0 |
| CVE-2009-3746 | – | Oct 22 | XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which… Affected: 10; 10 |
| CVE-2009-3706 | – | Oct 16 | Unspecified vulnerability in the ZFS filesystem in Sun Solaris 10, and OpenSolaris snv_100 through snv_117, allows local users to bypass intended limitations of the… Affected: 10; 10.0; 10 |
| CVE-2009-3468 | – | Sep 29 | Multiple unspecified vulnerabilities in Common Desktop Environment (CDE) in Sun Solaris 10, when Trusted Extensions is enabled, allow local users to execute arbitrary commands or… Affected: 10.0; 10.0 |
| CVE-2009-3432 | – | Sep 28 | Unspecified vulnerability in xscreensaver in Sun Solaris 10, and OpenSolaris before snv_112, when Xorg or Xnewt is used and RandR is enabled, allows physically proximate attackers… Affected: 10; 10 |
| CVE-2009-3183 | – | Sep 14 | Heap-based buffer overflow in w in Sun Solaris 8 through 10, and OpenSolaris before snv_124, allows local users to gain privileges via unspecified vectors Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2009-3164 | – | Sep 10 | Unspecified vulnerability in the IPv6 networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_122, when a Cassini GigaSwift Ethernet… Affected: 10.0; 10.0 |
| CVE-2009-3100 | – | Sep 8 | xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support,… Affected: 9; 9; 10; 10; 8 |
| CVE-2009-3000 | – | Aug 28 | The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause… Affected: 10.0; 10.0 |
| CVE-2009-2972 | – | Aug 27 | in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a "fork()/exec()… Affected: 8; 8; 9; 9 |
| CVE-2009-2952 | – | Aug 24 | Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors Affected: 10; 10 |
| CVE-2009-2912 | – | Aug 21 | The (1) sendfile and (2) sendfilev functions in Sun Solaris 8 through 10, and OpenSolaris before snv_110, allow local users to cause a denial of service (panic) via vectors… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2009-2711 | – | Aug 7 | XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to… Affected: 9.0; 10; 8.0; 9.0; 10 |
| CVE-2009-2652 | – | Aug 3 | Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allows remote attackers to cause a denial of service (panic) via… Affected: 10.0; 10.0 |
| CVE-2009-2644 | – | Jul 29 | Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a… Affected: 9.0; 9.0; 10.0; 10.0 |
| CVE-2009-2596 | – | Jul 27 | Unspecified vulnerability in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to… Affected: 10; 10 |
| CVE-2009-2488 | – | Jul 16 | Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client… Affected: 10; 10 |
| CVE-2009-2487 | – | Jul 16 | Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers… Affected: 10 |
| CVE-2009-2486 | – | Jul 16 | Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via… Affected: 10; 10 |
| CVE-2009-2430 | – | Jul 10 | Unspecified vulnerability in auditconfig in Sun Solaris 8, 9, 10, and OpenSolaris snv_01 through snv_58, when Solaris Auditing is enabled, allows local users with an RBAC… Affected: 8; 9; 10; 8; 9; 10 |
| CVE-2009-2297 | – | Jul 2 | Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensions is enabled, allows remote… Affected: 10.0; 10.0 |
| CVE-2009-2296 | – | Jul 2 | The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows remote attackers to access… Affected: 10; 10 |
| CVE-2009-2283 | – | Jul 1 | Multiple cross-site scripting (XSS) vulnerabilities in the help jsp scripts in Sun Java Web Console 3.0.2 through 3.0.5, and Sun Java Web Console in Solaris 10, allow remote… Affected: 10; 10 |
| CVE-2009-2187 | – | Jun 25 | Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a… Affected: 10.0; 10.0 |
| CVE-2009-2137 | – | Jun 19 | Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a… Affected: 10 |
| CVE-2009-2136 | – | Jun 19 | Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_117, when a Cassini GigaSwift Ethernet… Affected: 10.0; 10.0 |
| CVE-2009-2135 | – | Jun 19 | Multiple race conditions in the Solaris Event Port API in Sun Solaris 10 and OpenSolaris before snv_107 allow local users to cause a denial of service (panic) via unspecified… Affected: 10.0; 10.0 |
| CVE-2009-2029 | – | Jun 11 | Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denial of service (NIS+ daemon… Affected: 8; 9; 10; 8.0; 9.0; 10.0 |
| CVE-2009-1933 | – | Jun 5 | Kerberos in Sun Solaris 8, 9, and 10, and OpenSolaris before snv_117, does not properly manage credential caches, which allows local users to access Kerberized NFS mount points… Affected: 8; 8; 9; 9; 10; 10 |
| CVE-2008-3870 | – | May 26 | Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related… Affected: 8.0; 8.0; 9.0; 9.0 |
| CVE-2008-3869 | – | May 26 | Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request… Affected: 8.0; 8.0; 9.0; 9.0 |
| CVE-2009-1673 | – | May 18 | The kernel in Sun Solaris 9 allows local users to cause a denial of service (panic) by calling fstat with a first argument of AT_FDCWD Affected: 9; 9 |
| CVE-2009-1478 | – | Apr 29 | Multiple unspecified vulnerabilities in the DTrace ioctl handlers in Sun Solaris 10, and OpenSolaris before snv_114, allow local users to cause a denial of service (panic) via… Affected: 10; 10 |
| CVE-2009-1276 | – | Apr 9 | XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information… Affected: 8; 9; 10; 8; 9; 10 |
| CVE-2009-1207 | – | Apr 1 | Race condition in the dircmp script in Sun Solaris 8 through 10, and OpenSolaris snv_01 through snv_111, allows local users to overwrite arbitrary files, probably involving a… Affected: 8; 9; 10; 8; 9; 10 |
| CVE-2009-0926 | – | Mar 17 | Unspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through snv_91, when running in 32-bit mode on x86 systems, allows local users to cause a… Affected: 10 |
| CVE-2009-0925 | – | Mar 17 | Unspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv_47 through snv_85, allows local users to cause a denial of service (hang of UFS filesystem… Affected: 10.0 |