SU
Product
Sunos
561
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Sunos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-1999-0417 | – | Mar 9 | 64 bit Solaris 7 procfs allows local users to perform a denial of service Affected: 5.7 |
| CVE-1999-1371 | – | Mar 8 | Buffer overflow in /usr/bin/write in Solaris 2.6 and 7 allows local users to gain privileges via a long string in the terminal name argument Affected: 5.5.1; 5.7 |
| CVE-1999-0410 | – | Mar 5 | The cancel command in Solaris 2.6 (i386) has a buffer overflow that allows local users to obtain root access Affected: All versions, or not specified |
| CVE-1999-0223 | – | Mar 1 | Solaris syslogd crashes when receiving a message from a host that doesn't have an inverse DNS entry Affected: 5.4 |
| CVE-1999-0370 | – | Feb 10 | In Sun Solaris and SunOS, man and catman contain vulnerabilities that allow overwriting arbitrary files Affected: 5.4; 5.5; 5.5.1; 5.7 |
| CVE-1999-0952 | – | Jan 28 | Buffer overflow in Solaris lpstat via class argument allows local users to gain root access Affected: 5.7 |
| CVE-1999-0442 | – | Jan 7 | Solaris ff.core allows local users to modify files Affected: 5.5; 5.5.1; 5.7 |
| CVE-1999-0188 | – | Dec 17 | The passwd command in Solaris can be subjected to a denial of service Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0139 | – | Dec 12 | Buffer overflow in Solaris x86 mkcookie allows local users to obtain root access Affected: All versions, or not specified |
| CVE-1999-0057 | – | Nov 16 | Vacation program allows command execution by remote users through a sendmail command Affected: All versions, or not specified |
| CVE-1999-1025 | – | Nov 12 | CDE screen lock program (screenlock) on Solaris 2.6 does not properly lock an unprivileged user's console session when the host is an NIS+ client, which allows others with… Affected: 5.6 |
| CVE-1999-0056 | – | Sep 9 | Buffer overflow in Sun's ping program can give root access to local users Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0302 | – | Sep 1 | SunOS/Solaris FTP clients can be forced to execute arbitrary commands from a malicious FTP server Affected: 5.3; 5.5; 5.5.1 |
| CVE-1999-0065 | – | Aug 31 | Multiple buffer overflows in how dtmail handles attachments allows a remote attacker to execute commands Affected: 5.4; 5.5; 5.5.1 |
| CVE-1999-0339 | – | Aug 1 | Buffer overflow in the libauth library in Solaris allows local users to gain additional privileges, possibly root access Affected: 5.2; 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-1432 | – | Jul 16 | Power management (Powermanagement) on Solaris 2.4 through 2.6 does not start the xlock process until after the sys-suspend has completed, which allows an attacker with physical… Affected: 5.4; 5.5; 5.5.1 |
| CVE-1999-0263 | – | Jul 16 | Solaris SUNWadmap can be exploited to obtain root access Affected: All versions, or not specified |
| CVE-1999-1297 | – | Jul 15 | cmdtool in OpenWindows 3.0 and XView 3.0 in SunOS 4.1.4 and earlier allows attackers with physical access to the system to display unechoed characters (such as those from password… Affected: 4.1; 4.1.1; 4.1.2; 4.1.3; 4.1.4 |
| CVE-1999-0213 | – | Jul 15 | libnsl in Solaris allowed an attacker to perform a denial of service of rpcbind Affected: 5.4; 5.5; 5.5.1 |
| CVE-1999-0797 | – | Jun 29 | NIS finger allows an attacker to conduct a denial of service via a large number of finger requests, resulting in a large number of NIS queries Affected: All versions, or not specified |
| CVE-1999-0054 | – | Jun 10 | Sun's ftpd daemon can be subjected to a denial of service Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0008 | – | Jun 8 | Buffer overflow in NIS+, in Sun's rpc.nisd program Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0303 | – | May 21 | Buffer overflow in BNU UUCP daemon (uucpd) through long hostnames Affected: 4.1.3; 4.1.4; 5.0; 5.1; 5.2; 5.3; +3 more |
| CVE-1999-0055 | – | May 14 | Buffer overflows in Sun libnsl allow root access Affected: 5.2; 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0212 | – | Apr 29 | Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server Affected: 5.0 |
| CVE-1999-0009 | – | Apr 8 | Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0190 | – | Apr 8 | Solaris rpcbind can be exploited to overwrite arbitrary files and gain root access Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0010 | – | Apr 8 | Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages Affected: 5.3; 5.4; 5.5; 5.5.1; 5.6 |
| CVE-1999-0003 | – | Apr 1 | Execute commands as root via buffer overflow in Tooltalk database server (rpc.ttdbserverd) Affected: 4.1.3; 5.0; 5.1; 5.2; 5.3; 5.4; +2 more |
| CVE-1999-0502 | – | Mar 1 | A Unix account has a default, null, blank, or missing password Affected: 5.5.1; 5.7; 5.8 |
| CVE-1999-0795 | – | Mar 1 | The NIS+ rpc.nisd server allows remote attackers to execute certain RPC calls without authentication to obtain system information, disable logging, or modify caches Affected: All versions, or not specified |
| CVE-1999-0320 | – | Mar 1 | SunOS rpc.cmsd allows attackers to obtain root access by overwriting arbitrary files Affected: 4.1.3u1; 4.1.4; 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0296 | – | Feb 1 | Solaris volrmmount program allows attackers to read any file Affected: All versions, or not specified |
| CVE-1999-0125 | – | Jan 25 | Buffer overflow in SGI IRIX mailx program Affected: 5.5; 5.5.1 |
| CVE-1999-0513 | – | Jan 5 | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service Affected: 5.4; 5.5; 5.5.1 |
| CVE-1999-0273 | – | Jan 1 | Denial of service through Solaris 2.5.1 telnet by sending ^D characters Affected: 5.5.1 |
| CVE-1999-0015 | – | Dec 16 | Teardrop IP denial of service Affected: 4.1.3u1; 4.1.4 |
| CVE-1999-0104 | – | Dec 16 | A later variation on the Teardrop IP denial of service attack, a.k.a Affected: 4.1.3u1; 4.1.4 |
| CVE-1999-0017 | – | Dec 10 | FTP servers can allow an attacker to connect to arbitrary ports on machines other than the FTP client, aka FTP bounce Affected: 4.1.3u1; 4.1.4; 5.3; 5.4; 5.4; 5.5; +3 more |
| CVE-1999-0018 | – | Dec 5 | Buffer overflow in statd allows root privileges Affected: 5.4; 5.5; 5.5.1 |
| CVE-1999-0016 | – | Dec 1 | Land IP denial of service Affected: 4.1.3u1; 4.1.4 |
| CVE-1999-0210 | – | Nov 26 | Automount daemon automountd allows local or remote users to gain privileges via shell metacharacters Affected: 5.4; 5.5; 5.5.1 |
| CVE-1999-0097 | – | Oct 29 | The AIX FTP client can be forced to execute commands from a malicious server through shell metacharacters (e.g Affected: 4.1.3c; 4.1.3u1; 4.1.4; 5.3; 5.4; 5.5; +1 more |
| CVE-1999-0300 | – | Oct 1 | nis_cachemgr for Solaris NIS+ allows attackers to add malicious NIS+ servers Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0295 | – | Oct 1 | Solaris sysdef command allows local users to read kernel memory, potentially leading to root privileges Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0185 | – | Oct 1 | In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution Affected: 4.1.3u1; 4.1.4; 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0024 | – | Aug 13 | DNS cache poisoning via BIND, by predictable query IDs Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-0301 | – | Aug 1 | Buffer overflow in SunOS/Solaris ps command Affected: 5.3; 5.4; 5.5; 5.5.1 |
| CVE-1999-1419 | – | Jul 30 | Buffer overflow in nss_nisplus.so.1 library in NIS+ in Solaris 2.3 and 2.4 allows local users to gain root privileges Affected: 5.3; 5.4 |
| CVE-1999-1423 | – | Jun 26 | ping in Solaris 2.3 through 2.6 allows local users to cause a denial of service (crash) via a ping request to a multicast address through the loopback interface, e.g Affected: 5.3; 5.4; 5.5; 5.5.1 |
The 500 most important CVEs for this product (exploited first, then by severity)