SO
Product
Solaris
450
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-7028 | – | Feb 23 | Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a flood of small TCP/IP packets Affected: 9.0 |
| CVE-2007-0914 | – | Feb 14 | Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) via unknown vectors Affected: 10.0 |
| CVE-2007-0895 | – | Feb 13 | Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as… Affected: 9.0; 10.0 |
| CVE-2007-0668 | – | Feb 2 | The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which could lead to a denial of… Affected: 10.0 |
| CVE-2007-0634 | – | Jan 31 | Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain ICMP packets Affected: 10.0 |
| CVE-2007-0503 | – | Jan 25 | Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vectors Affected: 9.0 |
| CVE-2007-0470 | – | Jan 24 | Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors Affected: 9.0; 10.0 |
| CVE-2007-0393 | – | Jan 19 | Sun Solaris 9 does not properly verify the status of file descriptors before setuid execution, which allows local users to gain privileges by closing file descriptor 0, 1, or 2… Affected: 9.0 |
| CVE-2007-0165 | – | Jan 10 | Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests that trigger a crash in rpcbind Affected: 9.0 |
| CVE-2006-6494 | – | Dec 13 | Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a Affected: 9.0; 10.0 |
| CVE-2006-6495 | – | Dec 13 | Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in… Affected: 9.0; 10.0 |
| CVE-2006-6275 | – | Dec 4 | Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors, possibly related to the exitlwps function… Affected: 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2006-5726 | – | Nov 6 | alloccgblk in the UFS filesystem in Solaris 10 allows local users to cause a denial of service (memory corruption) by mounting crafted UFS filesystems with malformed data… Affected: 10.0 |
| CVE-2006-5396 | – | Oct 18 | The tcp_fuse_rcv_drain function in the Sun Solaris 10 kernel before 20061017, when TCP Fusion is enabled, allows local users to cause a denial of service (system crash) via a TCP… Affected: 10.0 |
| CVE-2006-4842 | – | Oct 12 | The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from… Affected: 10.0 |
| CVE-2006-5214 | – | Oct 10 | Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a… Affected: 9.0; 10.0 |
| CVE-2006-5213 | – | Oct 10 | Sun Solaris 10 before 20061006 uses "incorrect and insufficient permission checks" that allow local users to intercept or spoof packets by creating a raw socket on a link… Affected: 10.0 |
| CVE-2006-5201 | – | Oct 10 | Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3)… Affected: 9.0; 10.0 |
| CVE-2006-5215 | – | Oct 10 | The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite… Affected: 8.0; 8.0; 8.0; 9.0; 9.0; 9.0; +1 more |
| CVE-2006-5073 | – | Sep 29 | Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than… Affected: 9.0; 10.0 |
| CVE-2006-5075 | – | Sep 29 | The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (system crash) via unspecified vectors… Affected: 10.0; 10.0 |
| CVE-2006-5013 | – | Sep 27 | Sun Solaris 10 before patch 118855-16 (20060925), when run on x64 systems using IPv6, allows remote attackers to cause a denial of service (kernel panic) via crafted IPv6 packets Affected: 10.0 |
| CVE-2006-5012 | – | Sep 27 | Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent security messages from being… Affected: 8.0; 8.0; 8.0; 9.0; 9.0; 9.0; +5 more |
| CVE-2006-4655 | – | Sep 9 | Buffer overflow in the Strcmp function in the XKEYBOARD extension in X Window System X11R6.4 and earlier, as used in SCO UnixWare 7.1.3 and Sun Solaris 8 through 10, allows local… Affected: 8.0; 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2006-4439 | – | Aug 29 | pkgadd in Sun Solaris 10 before 20060825 installs files with insecure file and directory permissions (755 or 777) if the pkgmap file contains a "?" (question mark) in the mode… Affected: 10.0 |
| CVE-2006-4319 | – | Aug 24 | Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary… Affected: 8.0; 8.0; 8.0; 9.0; 9.0; 9.0; +4 more |
| CVE-2006-4307 | – | Aug 23 | Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that… Affected: 8.0; 9.0; 9.0 |
| CVE-2006-4306 | – | Aug 23 | Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access… Affected: 8.0; 9.0; 9.0 |
| CVE-2006-4303 | – | Aug 23 | Race condition in (1) libnsl and (2) TLI/XTI API routines in Sun Solaris 10 allows remote attackers to cause a denial of service ("tight loop" and CPU consumption for listener… Affected: 10.0 |
| CVE-2006-4139 | – | Aug 14 | Race condition in Sun Solaris 10 allows attackers to cause a denial of service (system panic) via unspecified vectors related to ifconfig and either netstat or SNMP queries Affected: 10.0 |
| CVE-2006-4117 | – | Aug 14 | The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service ("bad trap" and system panic) by… Affected: 10.0 |
| CVE-2006-3968 | – | Aug 1 | The crypto provider in Sun Solaris 10 3/05 HW2 without patch 121236-01, when running on Sun Fire T2000 platforms, incorrectly verifies a DSA signature, which might prevent… Affected: 10.0 |
| CVE-2006-3920 | – | Jul 28 | The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect… Affected: 9.0; 10.0 |
| CVE-2006-3825 | – | Jul 25 | The IPv4 implementation in Sun Solaris 10 before 20060721 allows local users to select routes that differ from the routing table, possibly facilitating firewall bypass or… Affected: 10.0 |
| CVE-2006-3824 | – | Jul 25 | systeminfo.c for Sun Solaris allows local users to read kernel memory via a 0 variable count argument to the sysinfo system call, which causes a -1 argument to be used by the… Affected: 10.0; 10.0 |
| CVE-2006-3783 | – | Jul 24 | Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors involving (1) the /net mount point and (2) the "-hosts" map in a mount point Affected: 10.0; 10.0 |
| CVE-2006-3782 | – | Jul 24 | Unspecified vulnerability in the kernel debugger (kmdb) in Sun Solaris 10, when running on x86, allows local users to cause a denial of service (system hang) via unspecified… Affected: 10.0 |
| CVE-2006-3781 | – | Jul 24 | Unspecified vulnerability in Sun Solaris 10 allows context-dependent attackers to cause a denial of service (panic) via unspecified vectors involving the event port API Affected: 10.0 |
| CVE-2006-3728 | – | Jul 21 | Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and without patch 118833-11 (118855-08) allows remote authenticated users to cause a… Affected: 10.0 |
| CVE-2006-3664 | – | Jul 18 | Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv hang) via unknown vectors Affected: 8.0; 8.0; 8.0; 9.0; 9.0; 9.0; +3 more |
| CVE-2006-3606 | – | Jul 18 | Unspecified vulnerability in Sun Solaris X Inter Client Exchange library (libICE) on Solaris 8 and 9 allows context-dependent attackers to cause a denial of service (application… Affected: 9.0 |
| CVE-2006-2064 | – | Apr 27 | Unspecified vulnerability in the libpkcs11 library in Sun Solaris 10 might allow local users to gain privileges or cause a denial of service (application failure) via unknown… Affected: 10.0; 10.0 |
| CVE-2006-1782 | – | Apr 13 | Unspecified vulnerability in Solaris 8 and 9 allows local users to obtain the LDAP Directory Server root Distinguished Name (rootDN) password when a privileged user (1) runs… Affected: 9.0 |
| CVE-2006-1780 | – | Apr 13 | The Bourne shell (sh) in Solaris 8, 9, and 10 allows local users to cause a denial of service (sh crash) via an unspecified attack vector that causes sh processes to crash during… Affected: 9.0; 10.0 |
| CVE-2006-0745 | – | Mar 21 | X.Org server (xorg-server) 1.0.0 and later, X11R6.9.0, and X11R7.0 inadvertently treats the address of the geteuid function as if it is the return value of a call to geteuid,… Affected: 10.0 |
| CVE-2006-1092 | – | Mar 9 | Unspecified vulnerability in the pagedata subsystem of the process file system (/proc) in Solaris 8 through 10 allows local users to cause a denial of service (system hang or… Affected: 9.0; 10.0 |
| CVE-2006-0901 | – | Feb 27 | Unspecified vulnerability in the hsfs filesystem in Solaris 8, 9, and 10 allows unspecified attackers to cause a denial of service (panic) or execute arbitrary code Affected: 8.0; 9.0; 9.0; 10.0; 10.0 |
| CVE-2006-0769 | – | Feb 18 | Unspecified vulnerability in in.rexecd in Solaris 10 allows local users to gain privileges on Kerberos systems via unknown attack vectors Affected: 10.0 |
| CVE-2006-0516 | – | Feb 2 | Unspecified vulnerability in the kernel processing in Solaris 10 64 bit platform, when running in 64-bit mode, allows local users to cause a denial of service (system panic) via… Affected: 10.0 |
| CVE-2006-0227 | – | Jan 17 | Multiple unspecified vulnerabilities in lpsched in Sun Solaris 8, 9, and 10 allow local users to delete arbitrary files or disable the LP print service via unknown attack vectors Affected: 9.0; 10.0; 10.0 |