SO
Product
Solaris
450
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 2Medium 1Low 0
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2004-1355 | – | Apr 26 | Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors Affected: All versions, or not specified |
| CVE-2004-1356 | – | Apr 23 | Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors Affected: 8.0; 9.0; 9.0 |
| CVE-2004-1357 | – | Apr 7 | The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for… Affected: 9.0; 9.0 |
| CVE-2004-1358 | – | Mar 12 | The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their… Affected: 9.0; 9.0 |
| CVE-2004-1359 | – | Mar 4 | Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2004-1180 | – | Feb 16 | Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash) Affected: All versions, or not specified |
| CVE-2004-1082 | – | Feb 3 | mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials Affected: 8.0; 9.0; 9.0 |
| CVE-2003-0999 | – | Jan 5 | Unknown multiple vulnerabilities in (1) lpstat and (2) the libprint library in Solaris 2.6 through 9 may allow attackers to execute arbitrary code or read or write arbitrary files Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1066 | – | Dec 31 | Buffer overflow in the syslog daemon for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (syslogd crash) and possibly execute arbitrary code via long… Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1082 | – | Dec 31 | Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4705891, a different vulnerability than… Affected: 2.6; 7.0; 8.0; 9.0 |
| CVE-2003-1076 | – | Dec 31 | Unknown vulnerability in sendmail for Solaris 7, 8, and 9 allows local users to cause a denial of service (unknown impact) and possibly gain privileges via certain constructs in a… Affected: 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1073 | – | Dec 31 | A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-0914 | – | Dec 15 | ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL… Affected: 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1056 | – | Dec 11 | The ed editor for Sun Solaris 2.6, 7, and 8 allows local users to create or overwrite arbitrary files via a symlink attack on temporary files Affected: 2.6; 7.0; 8.0 |
| CVE-2003-1057 | – | Dec 8 | Unknown vulnerability in CDE Print Viewer (dtprintinfo) for Sun Solaris 2.6 through 9 may allow local users to execute arbitrary code Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1058 | – | Dec 3 | The Xsun server for Sun Solaris 2.6 through 9, when running in Direct Graphics Access (DGA) mode, allows local users to cause a denial of service (Xsun crash) or to create or… Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1059 | – | Nov 20 | Unknown vulnerability in the libraries for the PGX32 frame buffer in Solaris 2.5.1 and 2.6 through 9 allows local users to gain root access Affected: 2.6; 9.0 |
| CVE-2003-1060 | – | Oct 27 | The NFS Server for Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (UFS panic) via certain invalid UFS requests, which triggers a null dereference Affected: 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1061 | – | Oct 14 | Race condition in Solaris 2.6 through 9 allows local users to cause a denial of service (kernel panic), as demonstrated via the namefs function, pipe, and certain STREAMS routines Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-0694 | – | Oct 6 | The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-0722 | – | Sep 22 | The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root… Affected: All versions, or not specified |
| CVE-2003-1081 | – | Sep 9 | Aspppls for Solaris 8 allows local users to overwrite arbitrary files via a symlink attack on the .asppp.fifo temporary file Affected: 8.0 |
| CVE-2003-0609 | – | Aug 27 | Stack-based buffer overflow in the runtime linker, ld.so.1, on Solaris 2.6 through 9 allows local users to gain root privileges via a long LD_PRELOAD environment variable Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-0669 | – | Aug 27 | Unknown vulnerability in Solaris 2.6 through 9 causes a denial of service (system panic) via "a rare race condition" or an attack by local users Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1063 | – | Aug 20 | The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and… Affected: 2.6; 7.0 |
| CVE-2003-1055 | – | Jul 3 | Buffer overflow in the nss_ldap.so.1 library for Sun Solaris 8 and 9 may allow local users to gain root access via a long hostname in an LDAP lookup Affected: 8.0; 9.0; 9.0 |
| CVE-2003-1067 | – | Jun 19 | Multiple buffer overflows in the (1) dbm_open function, as used in ndbm and dbm, and the (2) dbminit function in Solaris 2.6 through 9 allow local users to gain root privileges… Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1068 | – | Jun 6 | Buffer overflow in utmp_update for Solaris 2.6 through 9 allows local users to gain root privileges, as identified by Sun BugID 4659277, a different vulnerability than… Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1069 | – | Jun 3 | The Telnet daemon (in.telnetd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (CPU consumption by infinite loop) Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-0201 | – | May 5 | Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers… Affected: 2.5.1; 2.5.1; 2.6; 7.0; 8.0; 9.0; +2 more |
| CVE-2003-0196 | – | May 5 | Multiple buffer overflows in Samba before 2.2.8a may allow remote attackers to execute arbitrary code or cause a denial of service, as discovered by the Samba team and a different… Affected: 2.5.1; 2.5.1; 2.6; 7.0; 8.0; 9.0; +1 more |
| CVE-2003-1070 | – | Apr 28 | Unknown vulnerability in rpcbind for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (rpcbind crash) Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1072 | – | Apr 28 | Memory leak in lofiadm in Solaris 8 allows local users to cause a denial of service (kernel memory consumption) Affected: 8.0 |
| CVE-2003-0091 | – | Apr 2 | Stack-based buffer overflow in the bsd_queue() function for lpq on Solaris 2.6 and 7 allows local users to gain root privilege Affected: 2.6 |
| CVE-2003-0161 | – | Apr 2 | The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length… Affected: 2.4; 2.5; 2.5.1; 2.5.1; 2.6; 7.0; +4 more |
| CVE-2003-0092 | – | Apr 2 | Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable Affected: 2.6; 9.0 |
| CVE-2003-1074 | – | Mar 28 | Unknown vulnerability in newtask for Solaris 9 allows local users to gain root privileges Affected: 9.0; 9.0 |
| CVE-2003-0028 | – | Mar 25 | Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc,… Affected: 2.5.1; 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1077 | – | Mar 5 | Unknown vulnerability in UFS for Solaris 9 for SPARC, with logging enabled, allows local users to cause a denial of service (UFS file system hang) Affected: 9.0 |
| CVE-2003-0064 | – | Mar 3 | The dtterm terminal emulator allows attackers to modify the window title via a certain character escape sequence and then insert it back to the command line in the user's… Affected: 2.5.1; 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1078 | – | Feb 28 | The FTP client for Solaris 2.6, 7, and 8 with the debug (-d) flag enabled displays the user password on the screen during login Affected: 2.6; 7.0; 8.0 |
| CVE-2003-0058 | – | Feb 19 | MIT Kerberos V5 Key Distribution Center (KDC) before 1.2.5 allows remote authenticated attackers to cause a denial of service (crash) on KDCs within the same realm via a certain… Affected: 8.0; 9.0 |
| CVE-2003-1079 | – | Feb 18 | Unknown vulnerability in UDP RPC for Solaris 2.5.1 through 9 for SPARC, and 2.5.1 through 8 for x86, allows remote attackers to cause a denial of service (memory consumption) via… Affected: 2.5.1; 2.6; 7.0; 8.0; 9.0 |
| CVE-2003-0027 | – | Feb 7 | Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the… Affected: 2.5.1; 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1075 | – | Jan 27 | Unknown vulnerability in the FTP server (in.ftpd) for Solaris 2.6 through 9 allows remote attackers to cause a denial of service (temporary FTP server hang), which affects other… Affected: 2.6; 7.0; 8.0; 9.0; 9.0 |
| CVE-2003-1071 | – | Jan 3 | rpc.walld (wall daemon) for Solaris 2.6 through 9 allows local users to send messages to logged on users that appear to come from arbitrary user IDs by closing stderr before… Affected: 2.5.1; 2.6; 7.0; 8.0; 9.0 |
| CVE-2002-1871 | – | Dec 31 | pkgadd in Sun Solaris 2.5.1 through 8 installs files setuid/setgid root if the pkgmap file contains a "?" (question mark) in the (1) mode, (2) owner, or (3) group fields, which… Affected: 2.6 |
| CVE-2002-2203 | – | Dec 31 | Unknown vulnerability in the System Serial Console terminal in Solaris 2.5.1, 2.6, and 7 allows local users to monitor keystrokes and possibly steal sensitive information Affected: 2.5.1; 2.6; 7.0 |
| CVE-2002-2197 | – | Dec 31 | Unknown vulnerability in Sun Solaris 8.0 allows local users to cause a denial of service (kernel panic) via a program that uses /dev/poll, triggering a NULL pointer dereference Affected: 8.0 |
| CVE-2002-2089 | – | Dec 31 | Buffer overflow in rcp in Solaris 9.0 allows local users to execute arbitrary code via a long command line argument Affected: 9.0 |