SU
Product
Sunos
561
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 3Medium 2Low 0
Watch
Add Sunos to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-3666 | – | Aug 13 | Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic) via vectors involving… Affected: 5.10 |
| CVE-2008-0965 | – | Aug 8 | Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute… Affected: 5.8; 5.9; 5.10 |
| CVE-2008-0964 | – | Aug 8 | Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote attackers to execute… Affected: 5.8; 5.9; 5.10 |
| CVE-2008-3450 | – | Aug 4 | Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service (panic) via unspecified… Affected: 5.8; 5.9; 5.10 |
| CVE-2008-3426 | – | Jul 31 | Unspecified vulnerability in the Solaris Platform Information and Control Library daemon (picld) in Sun Solaris 8 through 10, and OpenSolaris builds snv_01 through snv_95, allows… Affected: 5.8; 5.9; 5.10 |
| CVE-2008-2946 | – | Jun 30 | The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service (daemon crash)… Affected: 5.8; 5.9; 5.10 |
| CVE-2008-2710 | – | Jun 16 | Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10 and OpenSolaris before snv_92… Affected: through - |
| CVE-2008-2708 | – | Jun 16 | Unspecified vulnerability in the Sun (1) UltraSPARC T2 and (2) UltraSPARC T2+ kernel modules in Sun Solaris 10, and OpenSolaris before snv_93, allows local users to cause a denial… Affected: 5.10 |
| CVE-2008-2144 | – | May 12 | Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via… Affected: 5.8; 5.9; 5.10 |
| CVE-2008-2121 | – | May 9 | The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts) via a TCP SYN flood attack Affected: 5.8; 5.9; 5.10 |
| CVE-2008-1778 | – | Apr 14 | Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service… Affected: 5.9; 5.10 |
| CVE-2008-1480 | – | Mar 24 | rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request Affected: 5.10 |
| CVE-2008-1369 | – | Mar 18 | A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that configure root logins in a manner… Affected: 5.10 |
| CVE-2008-1095 | – | Feb 29 | Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8, 9, and 10 allows remote attackers to bypass intended firewall policies or cause a denial… Affected: 5.8; 5.9; 5.10 |
| CVE-2008-0269 | – | Jan 15 | Unspecified vulnerability in the dotoprocs function in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors Affected: 5.10 |
| CVE-2007-6216 | – | Dec 4 | Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some… Affected: 5.10 |
| CVE-2007-5921 | – | Nov 10 | Unspecified vulnerability in the ioctl interface in the Solaris Volume Manager (SVM) in Sun Solaris 9 and 10 allows local users to cause a denial of service (panic) via… Affected: 5.9; 5.10 |
| CVE-2007-5422 | – | Oct 12 | Unspecified vulnerability in "Solaris Auditing" in the Basic Security Module (BSM) in Sun Solaris 10, when configured for auditing of networking (nt) events, allows local users to… Affected: 5.10 |
| CVE-2007-5225 | – | Oct 5 | Integer signedness error in FIFO filesystems (named pipes) on Sun Solaris 8 through 10 allows local users to read the contents of unspecified memory locations via a negative… Affected: 5.8; 5.9; 5.10 |
| CVE-2007-4395 | – | Aug 17 | Multiple unspecified vulnerabilities in the Role Based Access Control (RBAC) functionality in Sun Solaris 8 allow remote attackers who know the password for a role to gain… Affected: 5.8 |
| CVE-2007-4310 | – | Aug 13 | The finger daemon (in.fingerd) in Sun Solaris 7 through 9 allows remote attackers to list all accounts that have certain nonstandard GECOS fields via a request composed of a… Affected: 5.7; 5.8; 5.9 |
| CVE-2007-3717 | – | Jul 12 | rcp on Sun Solaris 8, 9, and 10 before 20070710 does not properly call certain helper applications, which allows local users to gain privileges by creating files with certain… Affected: 5.8; 5.9; 5.10 |
| CVE-2007-3223 | – | Jun 14 | Unspecified vulnerability in the NFS server in Sun Solaris 10 before 20070613 allows remote attackers to cause a denial of service (system crash) via certain XDR data in NFS… Affected: 5.10 |
| CVE-2007-3093 | – | Jun 6 | Unspecified vulnerability in the logging mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote attackers to execute arbitrary… Affected: 5.8; 5.9; 5.10 |
| CVE-2007-3094 | – | Jun 6 | Unspecified vulnerability in the authentication mechanism in Solaris Management Console (SMC) on Sun Solaris 8 through 10 before 20070605 allows remote authenticated users to… Affected: 5.8; 5.9; 5.10 |
| CVE-2007-2882 | – | May 30 | Unspecified vulnerability in the NFS client module in Sun Solaris 8 through 10 before 20070524, when operating as an NFS server, allows remote attackers to cause a denial of… Affected: 5.8; 5.9; 5.10 |
| CVE-2007-2529 | – | May 9 | Integer signedness error in the acl (facl) system call in Solaris 10 before 20070507 allows local users to cause a denial of service (kernel panic) and possibly gain privileges… Affected: 5.10 |
| CVE-2007-2465 | – | May 2 | Unspecified vulnerability in Sun Solaris 9, when Solaris Auditing (BSM) is enabled for file read, write, attribute modify, create, or delete audit classes, allows local users to… Affected: 5.9 |
| CVE-2007-2045 | – | Apr 16 | Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (CPU consumption) via crafted IP packets, probably… Affected: 5.8; 5.9 |
| CVE-2006-7140 | – | Mar 7 | The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding before generating a hash, which… Affected: 5.9 |
| CVE-2006-7028 | – | Feb 23 | Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a flood of small TCP/IP packets Affected: 5.7; 5.8 |
| CVE-2007-0895 | – | Feb 13 | Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as… Affected: 5.8 |
| CVE-2007-0882 | – | Feb 12 | Argument injection vulnerability in the telnet daemon (in.telnetd) in Solaris 10 and 11 (SunOS 5.10 and 5.11) misinterprets certain client "-f" sequences as valid requests for the… Affected: 5.10; 5.11 |
| CVE-2007-0503 | – | Jan 25 | Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vectors Affected: 5.8 |
| CVE-2007-0470 | – | Jan 24 | Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors Affected: 5.8 |
| CVE-2007-0165 | – | Jan 10 | Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests that trigger a crash in rpcbind Affected: 5.8 |
| CVE-2006-6494 | – | Dec 13 | Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a Affected: 5.8 |
| CVE-2006-6495 | – | Dec 13 | Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in… Affected: 5.8 |
| CVE-2006-6275 | – | Dec 4 | Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors, possibly related to the exitlwps function… Affected: 5.8 |
| CVE-2006-5201 | – | Oct 10 | Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3)… Affected: 5.8 |
| CVE-2006-5215 | – | Oct 10 | The Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060317, and Solaris 8 through 10 before 20061006, allows local users to overwrite… Affected: 5.8; 5.9 |
| CVE-2006-5214 | – | Oct 10 | Race condition in the Xsession script, as used by X Display Manager (xdm) in NetBSD before 20060212, X.Org before 20060225, and Solaris 8 through 10 before 20061006, causes a… Affected: 5.8 |
| CVE-2006-5073 | – | Sep 29 | Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a different vulnerability than… Affected: 5.8 |
| CVE-2006-5012 | – | Sep 27 | Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent security messages from being… Affected: 5.8; 5.9; 5.10 |
| CVE-2006-4319 | – | Aug 24 | Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC profile) to execute arbitrary… Affected: 5.8; 5.9; 5.10 |
| CVE-2006-4307 | – | Aug 23 | Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified vectors involving profiles that… Affected: 5.8 |
| CVE-2006-4306 | – | Aug 23 | Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving the default Role-Based Access… Affected: 5.8 |
| CVE-2006-3920 | – | Jul 28 | The TCP implementation in Sun Solaris 8, 9, and 10 before 20060726 allows remote attackers to cause a denial of service (resource exhaustion) via a TCP packet with an incorrect… Affected: 5.8 |
| CVE-2006-3728 | – | Jul 21 | Unspecified vulnerability in the kernel in Solaris 10 with patch 118822-29 (118844-29 on x86) and without patch 118833-11 (118855-08) allows remote authenticated users to cause a… Affected: 5.10 |
| CVE-2006-3664 | – | Jul 18 | Unspecified vulnerability in NIS server on Sun Solaris 8, 9, and 10 allows local and remote attackers to cause a denial of service (ypserv hang) via unknown vectors Affected: 5.8; 5.9 |
The 500 most important CVEs for this product (exploited first, then by severity)